GHSA-4fg7-vxc8-qx5wPublished
rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
osv · GHSA-4fg7-vxc8-qx5w
- https://github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w
- https://github.com/str4d/rage/commit/703152ecfa86f27952a35b57dd525ed39396a227
- https://github.com/str4d/rage
- https://rustsec.org/advisories/RUSTSEC-2024-0432.html
- https://rustsec.org/advisories/RUSTSEC-2024-0433.html
osv · RUSTSEC-2024-0432
- https://crates.io/crates/rage
- https://rustsec.org/advisories/RUSTSEC-2024-0432.html
- https://github.com/str4d/rage/commit/703152ecfa86f27952a35b57dd525ed39396a227
osv · RUSTSEC-2024-0433
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.