CVE-2026-5223: Crates in third party registries can override the cached source of other crates

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-May
Released
2026-05-27
EPSS Score
0.04% (percentile: 13.5%)

Affected Products (2)

Open Source Software

  • azl3 rust 1.75.0-28 on Azure Linux 3.0
  • azl3 rust 1.90.0-7 on Azure Linux 3.0

Revision History

  • 2026-05-27: Information published.