HIGH7.8crates.io
GHSA-3r3g-g73x-g593· CVE-2021-20319, RUSTSEC-2022-0103coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
Modified: 9/10/2026
package
pkg:crates.io/coreos-installer
coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
Modified: 9/10/2026
coreos-installer < 0.10.0 writes world-readable Ignition config to installed system
Modified: 11/8/2023
Incorrect signature verification on gzip-compressed install images
Modified: 12/21/2025