{"items":[{"id":"CVE-2026-5223","published":"2026-05-25T08:57:08.488Z","updated":"2026-05-27T18:35:35.093Z","title":"Crates in third party registries can override the cached source of other crates","severity":"MEDIUM","score":6.5,"vendor":"Rust Project","product":"Cargo","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-5222","published":"2026-05-25T08:54:56.348Z","updated":"2026-05-26T14:43:10.019Z","title":"Cargo can be coerced to share credentials between registries","severity":"LOW","score":2.3,"vendor":"Rust","product":"Cargo","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2025-11233","published":"2025-10-01T16:49:50.139Z","updated":"2025-10-01T17:35:23.572Z","title":"Rust standard library didn't detect all path separators on Cygwin","severity":"MEDIUM","score":6.3,"vendor":"Rust Project","product":"std","kev":false,"epss":0.00517,"kevAdded":null}]}