crates.io libz-sys vulnerabilities

Latest crates.io libz-sys CVEs

Newest publication first

1. RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory

   Published 2026-10-28

   Unknown

   The build script of libz-sys version <= 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with cc@1.6.0 or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under ta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.