Packagist / PACKAGE INTELLIGENCE

mediawiki/cargo

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

medium6.9

GHSA-gr6v-3pmp-996pFix available

Cargo Mediawiki Extension vulnerable to Cross-site Scripting

Packagist / mediawiki/cargo

18 Oct 2025

mediawiki/cargo Packagist

Affected range	Recorded fix
Earlier releases before 3.8.3Ecosystem versions	3.8.3

Version evidence: OSV · GHSA-gr6v-3pmp-996p

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "3.8.3"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "0.10",
    "0.11",
    "1.0",
    "1.0.1",
    "1.1.1",
    "1.2",
    "1.3",
    "1.3.1",
    "1.4",
    "1.5",
    "1.6",
    "1.7",
    "2.0",
    "2.0.1",
    "2.1",
    "2.1.1",
    "2.1.2",
    "2.2",
    "2.3",
    "2.3.1",
    "2.4",
    "2.5",
    "2.6",
    "2.7",
    "2.7.1",
    "2.8",
    "3.0",
    "3.1",
    "3.2",
    "3.3",
    "3.3.1",
    "3.4",
    "3.4.1",
    "3.4.2",
    "3.4.3",
    "3.4.4",
    "3.5",
    "3.5.1",
    "3.6",
    "3.6.1",
    "3.7",
    "3.7.1",
    "3.8",
    "3.8.1",
    "3.8.2"
  ]
}

medium6.1

GHSA-jqvm-9xm2-gc38Fix available

Mediawiki Cargo extension vulnerable to Cross-site Scripting

Packagist / mediawiki/cargo

05 Oct 2024

mediawiki/cargo Packagist

Affected range	Recorded fix
Earlier releases before 3.6.1Ecosystem versions	3.6.1

Version evidence: OSV · GHSA-jqvm-9xm2-gc38

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "3.6.1"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "0.10",
    "0.11",
    "1.0",
    "1.0.1",
    "1.1.1",
    "1.2",
    "1.3",
    "1.3.1",
    "1.4",
    "1.5",
    "1.6",
    "1.7",
    "2.0",
    "2.0.1",
    "2.1",
    "2.1.1",
    "2.1.2",
    "2.2",
    "2.3",
    "2.3.1",
    "2.4",
    "2.5",
    "2.6",
    "2.7",
    "2.7.1",
    "2.8",
    "3.0",
    "3.1",
    "3.2",
    "3.3",
    "3.3.1",
    "3.4",
    "3.4.1",
    "3.4.2",
    "3.4.3",
    "3.4.4",
    "3.5",
    "3.5.1",
    "3.6"
  ]
}

medium6.1

GHSA-rhpm-63w5-79rgFix available

MediaWiki Cargo Extension Cross-site Scripting vulnerability

Packagist / mediawiki/cargo

12 Jan 2024

mediawiki/cargo Packagist

Affected range	Recorded fix
Earlier releases before 1.35.14Ecosystem versions	1.35.14

Version evidence: OSV · GHSA-rhpm-63w5-79rg

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "1.35.14"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "0.10",
    "0.11",
    "1.0",
    "1.0.1",
    "1.1.1",
    "1.2",
    "1.3",
    "1.3.1",
    "1.4",
    "1.5",
    "1.6",
    "1.7"
  ]
}

mediawiki/cargo Packagist

Affected range	Recorded fix
From 1.36.0 before 1.39.6Ecosystem versions	1.39.6

Version evidence: OSV · GHSA-rhpm-63w5-79rg

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.36.0"
        },
        {
          "fixed": "1.39.6"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": []
}

mediawiki/cargo Packagist

Affected range	Recorded fix
From 1.40.0 before 1.40.2Ecosystem versions	1.40.2

Version evidence: OSV · GHSA-rhpm-63w5-79rg

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.40.0"
        },
        {
          "fixed": "1.40.2"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": []
}