The vulnerability, which carries a perfect 10 base severity score, is tracked as CVE-2024-24576. It affects the Rust standard library, which was found to be improperly escaping arguments when invoking batch files on Windows using the Command API.
The vulnerability, which carries a perfect 10 base severity score, is tracked as CVE-2024-24576. It affects the Rust standard library, which was found to be improperly escaping arguments when invoking batch files on Windows using the Command API.
Seems like a Windows issue, not a Rust one. Odd choice to assign it to Rust.
Yeah, seems very much like “Rust fails to implement elaborate enough workaround for a stupid design choice in Windows”.