Cargo crates in third party registries can override the cached source of other crates (CVE-2026-5223) | HOL Guard CVE