{"id":36086,"date":"2020-07-15T10:10:00","date_gmt":"2020-07-15T10:10:00","guid":{"rendered":"http:\/\/dc28ef1d-4dca-4dbb-b0da-21bdfb33dfee"},"modified":"2020-07-15T10:10:00","modified_gmt":"2020-07-15T10:10:00","slug":"rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/","title":{"rendered":"Rust programming language: Crates package API tokens revoked over serious security flaw"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/zdnet2.cbsistatic.com\/hub\/i\/r\/2020\/07\/15\/09936573-e0e4-4af6-9044-36869a686a3f\/thumbnail\/770x578\/b963fc0af0a1048f5a48802b9f4b43f2\/developeristock-1097775062a.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>The project behind <a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-rust-enters-top-20-popularity-rankings-for-the-first-time\/\" target=\"_blank\" rel=\"noopener noreferrer\">popular programming language Rust<\/a> has revoked all API keys from its <a href=\"http:\/\/crates.io\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">crates.io<\/a> package web app.&nbsp;<\/p>\n<p>The key revocation addresses a serious vulnerability affecting Rust&#8217;s package system due to two factors. First, Rust developers learned that the PostgreSQL random function it used to generate API keys or tokens for crates.io was not a &#8220;cryptographically secure&#8221; random-number generator.&nbsp;<\/p>\n<p>&#8220;In theory, an attacker could observe enough random values to determine the internal state of the random-number generator, and use this information to determine previously created API keys up to the last database server reboot,&#8221; it states.&nbsp;<\/p>\n<p><strong>SEE: <\/strong><a href=\"https:\/\/www.techrepublic.com\/resource-library\/whitepapers\/hiring-kit-python-developer\/?ftag=CMG-01-10aaa1b\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\"><strong>Hiring Kit: Python developer<\/strong><\/a><strong> (TechRepublic Premium)<\/strong><\/p>\n<p>API keys are used by computers to authenticate a user or machine and control what access rights they have.&nbsp;<\/p>\n<p>Secondly, the Rust project discovered that the API keys for the packages were being stored in plain text. If attackers breached the database, they would have API access for all current tokens.&nbsp;<\/p>\n<p>The Rust project has now rolled out a cryptographically secure random-number generator and implemented a hashing function for storing tokens in the database.&nbsp;<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>&#8220;Exploiting either issue would be incredibly impractical in practice, and we&#8217;ve found no evidence of this being exploited in the wild. However, out of an abundance of caution, we&#8217;ve opted to revoke all existing API keys,&#8221; it says in the advisory.&nbsp;<\/p>\n<p>Developers who have published crates packages can generate a <a href=\"http:\/\/crates.io\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">new API key at the crates.io website<\/a>.&nbsp;<\/p>\n<p><strong>SEE: <\/strong><a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-developers-reveal-what-they-love-and-loathe-and-what-pays-best\/\"><strong>Programming languages: Developers reveal what they love and loathe, and what pays best<\/strong><\/a><\/p>\n<p>The crates.io site indicates that there are over 43,000 crates that have been downloaded collectively over three billion times. Crates are a key part of the Rust programming language. <a href=\"https:\/\/www.zdnet.com\/article\/deno-1-0-node-js-makers-have-new-javascript-runtime-for-typescript-programming-language\/\" target=\"_blank\" rel=\"noopener noreferrer\">Deno, the possible successor to Node.js<\/a>, was written in Rust and is considered a collection of crates rather than a monolithic program. &nbsp;<\/p>\n<p>The Rust project appears to have acted swiftly on the vulnerability report it received on July 11. The issue was fixed and tokens revoked along with a disclosure notice on July 14. &nbsp;<\/p>\n<h3>More on Rust and programming languages<\/h3>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-now-rust-project-looks-for-a-way-into-the-linux-kernel\/\"><strong>Programming languages: Now Rust project looks for a way into the Linux kernel<\/strong><\/a><strong>&nbsp;<\/strong>&nbsp;<\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-rust-enters-top-20-popularity-rankings-for-the-first-time\/\">Programming languages: Rust enters top 20 popularity rankings for the first time<\/a>&nbsp;<\/strong>&nbsp;<\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/microsoft-heres-why-we-love-programming-language-rust-and-kicked-off-project-verona\/\">Microsoft: Here&#8217;s why we love programming language Rust and kicked off Project Verona<\/a><\/strong>&nbsp;&nbsp;<\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-developers-reveal-what-they-love-and-loathe-and-what-pays-best\/\">Programming languages: Developers reveal what they love and loathe, and what pays best<\/a>&nbsp;&nbsp;<\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/programming-language-rust-5-years-on-from-v1-0-heres-the-good-and-the-bad-news\/\">Programming language Rust: 5 years on from v1.0, here&#8217;s the good and the bad news<\/a><\/strong><\/li>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/microsoft-heres-how-were-killing-a-class-of-memory-security-bugs-in-windows-10\/\"><strong>Microsoft: Here&#8217;s how we&#8217;re killing a class of memory security bugs in Windows 10<\/strong><\/a><strong>&nbsp;&nbsp;<\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/programming-language-rusts-adoption-problem-developers-reveal-why-more-arent-using-it\/\">Programming language Rust&#8217;s adoption problem: Developers reveal why more aren&#8217;t using it<\/a>&nbsp;&nbsp;<\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/google-programming-language-scorecard-how-c-c-dart-rust-go-rate-for-fuchsia\/\">Google programming language scorecard: How C, C++, Dart, Rust, Go rate for Fuchsia<\/a><\/strong><\/li>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/developers-love-rust-programming-language-heres-why\/\"><strong>Developers love Rust programming language: Here&#8217;s why<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/microsoft-were-creating-a-new-rust-based-programming-language-for-secure-coding\/\"><strong>Microsoft: We&#8217;re creating a new Rust-like programming language for secure coding<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/programming-languages-javascript-now-used-by-12-million-developers-but-kotlin-rises-fastest\/\"><strong>Programming languages: Kotlin rises fastest but JavaScript lures millions more developers<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/www.zdnet.com\/article\/microsoft-opens-up-rust-inspired-project-verona-programming-language-on-github\/\"><strong>Microsoft opens up Rust-inspired Project Verona programming language on GitHub<\/strong><\/a><\/li>\n<li><strong><a href=\"https:\/\/www.zdnet.com\/article\/brave-defies-googles-moves-to-cripple-ad-blocking-with-new-69x-faster-rust-engine\/\">Brave defies Google&#8217;s moves to cripple ad-blocking with new 69x faster Rust engine<\/a><\/strong><\/li>\n<li><a href=\"https:\/\/www.techrepublic.com\/article\/how-to-install-rust-on-linux\/?ftag=CMG-01-10aaa1b\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\"><strong>How to install Rust on Linux<\/strong><\/a><strong>&nbsp;TechRepublic&nbsp;<\/strong><\/li>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rust&#8217;s crates package API keys were not randomly generated and were being stored in plain text.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":36087,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-36086","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-07-15T10:10:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Rust programming language: Crates package API tokens revoked over serious security flaw\",\"datePublished\":\"2020-07-15T10:10:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/\"},\"wordCount\":551,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/\",\"name\":\"Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg\",\"datePublished\":\"2020-07-15T10:10:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rust programming language: Crates package API tokens revoked over serious security flaw\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/","og_locale":"en_US","og_type":"article","og_title":"Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-07-15T10:10:00+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Rust programming language: Crates package API tokens revoked over serious security flaw","datePublished":"2020-07-15T10:10:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/"},"wordCount":551,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/","url":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/","name":"Rust programming language: Crates package API tokens revoked over serious security flaw 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg","datePublished":"2020-07-15T10:10:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/07\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw.jpg","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/rust-programming-language-crates-package-api-tokens-revoked-over-serious-security-flaw\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Rust programming language: Crates package API tokens revoked over serious security flaw"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=36086"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/36086\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/36087"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=36086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=36086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=36086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}