Linux Distros Unpatched Vulnerability : CVE-2026-40489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based...

EditorConfig security vulnerabilities

EditorConfig is an open-source application developed by EditorConfig. It allows for easy maintenance of the correct coding style when switching between different text editors and different projects. EditorConfig versions prior to 0.12.10 have security vulnerabilities; these vulnerabilities stem...

CVE-2026-40489: Stack-based Buffer Overflow

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ecglob that allows an attacker to crash any application using libeditorconfig by providing a specially crafted directo...

PT-2026-33581

Name of the Vulnerable Software and Affected Versions editorconfig-core-c versions prior to 0.12.11 Description A stack-based buffer overflow exists in the ec glob function. An attacker can cause a crash in any application using libeditorconfig by providing a specially crafted directory structure...

EUVD-2024-52173

Malicious code in bioql PyPI...

EUVD-2023-12402

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-0341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and...

TencentOS Server 4: editorconfig (TSSA-2025:0178)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0178 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2024-53849

editorconfig-core-c is theEditorConfig core library written in C for use by plugins supporting EditorConfig parsing. In affected versions several overflows may occur in switch case '' when the input pattern contains many escaped characters. The added backslashes leave too little space in the outp...

EditorConfig ec_glob() Buffer Overflow DoS

The vulnerability of the ecglob function in the EditorConfig code library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2024-53849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - editorconfig-core-c is theEditorConfig core library written in C for use by plugins supporting EditorConfig parsing. In affected versions several overflows may...

EditorConfig Buffer Overflow DoS

The vulnerability of the EditorConfig core library in the C programming language is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7168-1 editorconfig-core vulnerabilities

It was discovered that EditorConfig improperly managed memory when handling certain inputs, leading to overflows. An attacker could possibly use these issues to cause a denial of service, or execute arbitrary code...

USN-7168-1: EditorConfig vulnerabilities

It was discovered that EditorConfig improperly managed memory when handling certain inputs, leading to overflows. An attacker could possibly use these issues to cause a denial of service, or execute arbitrary code...

Ubuntu: Security Advisory (USN-7168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : EditorConfig vulnerabilities (USN-7168-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7168-1 advisory. It was discovered that EditorConfig improperly managed memory when handling certain inputs, leading to overflows. An...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : editorconfig-core-c (SUSE-SU-2024:4152-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4152-1 advisory. - CVE-2024-53849: stack buffer overflow and pointer overflow when handling escaped characters. bsc1233815...

openSUSE Security Advisory (SUSE-SU-2024:4152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for editorconfig-core-c

This update for editorconfig-core-c fixes the following issues: CVE-2024-53849: stack buffer overflow and pointer overflow when handling escaped characters. bsc1233815 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2024:4152-1 Security update for editorconfig-core-c

This update for editorconfig-core-c fixes the following issues: - CVE-2024-53849: stack buffer overflow and pointer overflow when handling escaped characters. bsc1233815...