CVE-2019-16760

CVE-2019-16760 describes a vulnerability in Cargo, the Rust package manager, affecting Rust versions prior to 1.26.0. If a package.toml file used the "package" configuration key to rename dependencies, Cargo could download a malicious, squatted package instead of the intended one. This high-severity vulnerability (CVSS 7.5) has a network attack vector and low attack complexity, potentially leading to high integrity impact by introducing malicious code. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.