Today, Rust 1.77.2 will be released with a critical security patch to the standard library for those on Windows using the Command API to invoke batch files with untrusted arguments. No other platform or use is affected.

See the announcement for details: https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html

Rust 1.77.2 is now available: https://blog.rust-lang.org/2024/04/09/Rust-1.77.2.html