cargo · threatengine.sh

CVE-2026-39841

< 3.8.7

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Ca

6.1MEDIUM

CVE-2026-39840

< 3.8.7

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawi

6.1MEDIUM

CVE-2026-39839

< 3.8.7

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Ca

6.1MEDIUM

CVE-2026-39837

< 3.8.7

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extensi

5.4MEDIUM

CVE-2024-47849

all versions

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Med

9.8CRITICAL

CVE-2024-47847

all versions

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundat

6.1MEDIUM

CVE-2024-47846

all versions

Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.Th

8.8HIGH

CVE-2023-38497

< 0.72.2

Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior

7.9HIGH

CVE-2022-46176

<= 0.67.0

Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification w

5.3MEDIUM

CVE-2022-36114

< 0.65.0

Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extrac

4.8MEDIUM

CVE-2022-36113

< 0.65.0

Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the

4.6MEDIUM

mediawiki cargo