Cargo Security Flaw: Does URL Normalization Risk Your Secrets?
The Rust Security Response Team has disclosed CVE-2026-5222, a vulnerability in Cargo's URL normalization that could expose registry credentials. Fortunately, its 'low' severity stems from an extremely specific attack vector.