A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| users(crates.io) | 0.8.0 | N/A | N/A |
CVSS Metrics