HIGH7.8crates.io
GHSA-3r3g-g73x-g593· CVE-2021-20319, RUSTSEC-2022-0103coreos-installer improperly verifies GPG signature when decompressing gzipped artifact
Modified: 9/10/2026
package
crates.io/coreos-installer
pkg:crates.io/coreos-installer
MEDIUM5.5crates.io
GHSA-862g-9h5m-m3qv· CVE-2021-3917coreos-installer < 0.10.0 writes world-readable Ignition config to installed system
Modified: 11/8/2023
HIGH7.8crates.io
RUSTSEC-2022-0103· CVE-2021-20319, GHSA-3r3g-g73x-g593Incorrect signature verification on gzip-compressed install images
Modified: 12/21/2025