{"items":[{"id":"CVE-2026-102820","published":"2026-09-29T18:18:43.297Z","updated":"2026-09-30T20:11:08.453Z","title":"pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)","severity":"MEDIUM","score":6.2,"vendor":"Eugeny","product":"russh","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-5222","published":"2026-05-25T08:54:56.348Z","updated":"2026-05-26T14:43:10.019Z","title":"Cargo can be coerced to share credentials between registries","severity":"LOW","score":2.3,"vendor":"Rust","product":"Cargo","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2019-16760","published":"2019-09-30T21:39:38.000Z","updated":"2024-08-05T01:24:48.330Z","title":"Cargo prior to Rust 1.26.0 may download the wrong dependency","severity":"MEDIUM","score":4.6,"vendor":"rust","product":"cargo","kev":false,"epss":0.0126,"kevAdded":null}]}