Vulnerabilities in rust-lang
10 resultsCVE-2024-24576CRITICALRusts's `std::process::Command` did not properly escape arguments of batch files on WindowsEPSS 20.3%CVE-2022-24713HIGHRegular expression denial of service in Rust's regex crateEPSS 14.5%CVE-2022-21658HIGHRace condition in std::fs::remove_dir_all in rustlangEPSS 1.4%CVE-2020-26297HIGHXSS in mdBook's search pageEPSS 1.3%CVE-2023-40030MEDIUMMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reportsEPSS 0.8%CVE-2022-36113MEDIUMExtracting malicious crates can corrupt arbitrary filesEPSS 0.8%CVE-2023-38497HIGHCargo not respecting umask when extracting crate archivesEPSS 0.8%CVE-2024-43402HIGHRust OS Command Injection/Argument Injection vulnerabilityEPSS 0.7%CVE-2022-46176MEDIUMCargo did not verify SSH host keysEPSS 0.6%CVE-2022-36114MEDIUMExtracting malicious crates can fill the file systemEPSS 0.6%