Package
cargo-c
Component
gix-date
Latest update
Fixed version
0.10.23-r1
7.1
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
0.10.23-r1Status
Impact
cargo-c is tightly coupled to a specific version of cargo, which transitively pulls in this gix ecosystem package. cargo/cargo-c upstreams will need to move their respective dependencies forward for remediation.
Status
Fixed version
0.10.21-r0Status
Impact
This vulnerability affects gix-date, a transitive dependency through the gix crate. The vulnerability is fixed in gix-date >= 0.12.0, but upgrading causes build failures due to version incompatibilities.
Status