VDB
GCVE-110-CARGO-2026-000031
GCVE-110-CARGO-2026-000031
Advisory Published
The crates.io crate `ccplan` (version 1.2.0) was flagged as malicious by automated package analysis (2 evidence detection(s)). Installing it may execute attacker-controlled code via its build.rs build script or bundled Rust source. This verdict is produced by static analysis and is subject to human review.
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| cargo | ccplan | * (affected) | — |
Browse GCVE Records
74,198 records in the GCVE database · Updated July 21, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.