CyberRota Analysis
AI-GeneratedThe append-only-vec crate version 0.1.9 for Rust contains a malicious dependency that can execute arbitrary code during project compilation, posing a critical risk to any application utilizing this crate. Organizations that rely on Rust for development, especially those incorporating this specific version of the crate, should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.