Security advisory for Cargo (CVE-2022-46176)

This page summarizes the projects mentioned and recommended in the original post on /r/rust

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • Cargo

    The Rust package manager

  • It looks like this might be the commit that fixes the vulnerability: https://github.com/rust-lang/cargo/commit/c9bff1ec6d147e0254ecfcafe6325ef1643edb6d

  • wg-security-response

    Documentation for the Rust Security Response WG

  • Patch files for Rust 1.66.0 are also available here for custom-built toolchains.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • blog.rust-lang.org

    Home of the Rust and Inside Rust blogs

  • Indeed! Thanks for pointing this out, I just opened a PR to mention the additional mitigation.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts