Junglewise Threat Intelligence

CVE-2023-40030: Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

CVE-2023-40030 · Severity: info · Published 2023-08-24

Technologies: cargo (crates.io). Vendors: crates.io.

Executive brief

Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

Affected products

  • crates.io cargo

Related threats