rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary.
Advisories for Cargo/Rage package
2024
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary.