EUVD-2026-68323

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...

CVE-2026-82605

CVE-2026-82605 affects BareBones BBEdit versions up to 15.5.5 , specifically the Lasso Language Tokenizer component. The vulnerability causes an infinite loop when processing crafted Lasso language input, leading to a denial-of-service condition. The attack can be executed remotely but requires u...

CVE-2026-82604

A vulnerability in BareBones BBEdit (versions up to 15.5.5 ) in the Java Language Module allows uncontrolled recursion , leading to a potential denial-of-service (low availability impact). The flaw is remotely exploitable with user interaction required and no privileges needed, yielding a CVSS 3....

EUVD-2026-68313

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...

多个Bare Bones软件产品软件升级机制校验漏洞

CVE ID:CVE-2013-3667 Bare Bones Software是一家开发Apple Mac平台上软件工具的公司。 Bare Bones Software Yojimbo 4.0之前版本, TextWrangler 4.5.3之前版本, 和BBEdit 10.5.5之前版本中所使用的软件升级机制在安装软件之前不正确下载和校验升级，允许攻击者利用漏洞更改或破坏升级内容。 0 Bare Bones Software Yojimbo Bare Bones Software TextWrangler Bare Bones Software BBEdit 厂商补丁： Bare...

Design/Logic Flaw

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...

CVE-2013-3667

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...

CVE-2013-3667

The vulnerability (CVE-2013-3667) affects Bare Bones Software products that use their software update mechanism: Yojimbo <= 3.x? (pre‑4.0), TextWrangler <= 4.5.3, and BBEdit