# sonatype-2022-2788

## rustdecimal - Malicious Package

Published May 11, 2022

[blog.rust-lang.org](https://blog.rust-lang.org/2022/05/10/malicious-crate-rustdecimal.html)

### CVSS Score
Critical

10.0

### Security Details

#### Components Impacted

- Sonatype Research

### sonatype-2022-2788 Security Details

#### CVE ID
sonatype-2022-2788

#### CWE
N/A

#### CVE Description
rustdecimal - Malicious Package

#### Published
May 11, 2022

### CVSS Score & Severity

10.0 Critical

#### CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

### EPSS Score
0%

### Malware
malware

### KEV Status
Not in KEV Catalog: No known exploits

### Affected Ecosystems

- Source: Sonatype

#### References

[blog.rust-lang.org](https://blog.rust-lang.org/2022/05/10/malicious-crate-rustdecimal.html "https://blog.rust-lang.org/2022/05/10/malicious-crate-rustdecimal.html") THIRD_PARTY