Repository navigation
Security: cargo-bins/cargo-binstall
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Unvalidated crate bin name escapes cargo-binstall's install directoryGHSA-jxjx-4v2j-96qg published
Oct 13, 2026 by NobodyXuModerate -
Zip symlink entries: absolute targets pass validation; later entries write through the symlink out of the extraction directory (unix)GHSA-8276-gxvh-4xr8 published
Sep 30, 2026 by NobodyXuHigh -
Zip path traversal on Windows: rooted entry names escape the extraction directory to arbitrary paths on the volumeGHSA-jrxx-5q54-fhjr published
Sep 30, 2026 by NobodyXuHigh
Learn more about advisories related to cargo-bins/cargo-binstall in the GitHub Advisory Database