rust-lang cargo

• CVE-2023-40030 Medium 6.1 Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 0.9%
• CVE-2023-38497 High 7.8 Cargo not respecting umask when extracting crate archives 0.7%
• CVE-2022-46176 Medium 5.3 Cargo did not verify SSH host keys 0.7%
• CVE-2022-36113 Medium 4.6 Extracting malicious crates can corrupt arbitrary files 1.2%
• CVE-2022-36114 Medium 4.8 Extracting malicious crates can fill the file system 0.9%