CLEANSTART-2026-PD38070: Security fix for GHSA-8p3x-q3q3-q3v5 applied in: rustup 1.28.2-r6

Q: Which rustup package release contains the security fix?

The fix is applied in rustup 1.28.2-r6. The issue is resolved in later releases as well.

Q: What information is available to assess exposure or temporary mitigations?

The provided data identifies rustup as affected and names the fixed release, but does not specify affected configurations, exploitation prerequisites, indicators of compromise, or mitigations other than updating to a fixed release.

Published Nov 8, 2026

Updated

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

1 affected componentFixes available

cleanstart/rustup<1.28.2-r6

1.28.2-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/rustup to a version that resolves this vulnerability.
Fixed in 1.28.2-r6
Upgrade
Upgrade rustup to a version that resolves this vulnerability.
Fixed in 1.28.2-r6Patch GHSA-8p3x-q3q3-q3v5

Event History

Nov 8, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-8p3x-q3q3-q3v5

Frequently Asked Questions

Which rustup package release contains the security fix?

The fix is applied in rustup 1.28.2-r6. The issue is resolved in later releases as well.

What information is available to assess exposure or temporary mitigations?

The provided data identifies rustup as affected and names the fixed release, but does not specify affected configurations, exploitation prerequisites, indicators of compromise, or mitigations other than updating to a fixed release.

CLEANSTART-2026-PD38070: Security fix for GHSA-8p3x-q3q3-q3v5 applied in: rustup 1.28.2-r6

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which rustup package release contains the security fix?

What information is available to assess exposure or temporary mitigations?

Company

Resources

Contact

Frequently Asked Questions

Which rustup package release contains the security fix?

What information is available to assess exposure or temporary mitigations?