CVE-2026-5223

概要

参考情報

• blog.rust-lang.org/2026/05/25/cve-2026-5223 · Mitigation
• rust-lang/cargo#17031 · Issue Tracking
• groups.google.com/g/rustlang-security-announcements/c/IB74S7Yksg8 · Mailing List

cargo のその他の脆弱性

• CVE-2026-5222中 6.5Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider…
• CVE-2023-38497高 7.3Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version …
• CVE-2022-46176中 5.9Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when clonin…
• CVE-2022-36114中 6.5Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from c…
• CVE-2022-36113高 8.1Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the ~/.cargo …