Executive brief
Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
Affected products
- crates.io cargo
Junglewise Threat Intelligence
CVE-2023-40030 · Severity: info · Published 2023-08-24
Technologies: cargo (crates.io). Vendors: crates.io.
Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports