https://vulnogram.org/ Most recent CVEs assigned by The Rust Project (rust). https://vulnogram.org/seaview/icons/rust.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-5223 https://vulnogram.org/CVE-2026-5223 Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The severity of the vulnerability is **medium** for us… Medium Network Exploitable Mon, 25 May 2026 08:57:08 GMT https://vulnogram.org/CVE-2026-5222 https://vulnogram.org/CVE-2026-5222 Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to pub… Low Network Exploitable Mon, 25 May 2026 08:54:56 GMT https://vulnogram.org/CVE-2025-11233 https://vulnogram.org/CVE-2025-11233 Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target (`x86_64-pc-cygwin`) didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs… Medium Network Exploitable Wed, 01 Oct 2025 16:49:50 GMT