Microsoft’s Security Update Guide entry for CVE-2026-5222 points to a low-severity Cargo vulnerability disclosed by the Rust Security Response Team on May 25, 2026, affecting Cargo versions shipped from Rust 1.68 through before Rust 1.96 when using third-party sparse registries. The short...