Forks of forks of forks, but which ones are patched? A vulnerability in the popular Rust crate async-tar has affected the fast uv Python package manager, which uses a forked version that's now patched ...
The project behind popular programming language Rust has revoked all API keys from its crates.io package web app. The key revocation addresses a serious vulnerability affecting Rust's package system ...