624 matches found
EUVD-2026-24981
rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...
GHSA-WV33-5PXH-R7J7 cut: -s (only-delimited) ignored when delimiter is a newline
The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...
GHSA-6GCW-W7CP-94G9 comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output
The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::fromutf8lossy, which replaces invalid UTF-8 byte sequences with the Unicode replacement character U+FFFD. This behavior differs from GNU comm, whic...
EUVD-2026-24978
comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output...
GHSA-2W8R-9XJ7-69J5 mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...
EUVD-2026-24971
mktemp: empty TMPDIR creates temp files in CWD instead of /tmp...
mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...
EUVD-2026-24965
chmod: recursive mode returns exit code 0 even when some files fail last-file-wins...
EUVD-2026-24963
chmod: --preserve-root bypassed by any path that resolves to root e.g. /../...
CVE-2026-35376 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-6G8R-74QP-6859 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-MH5C-XRMH-M794 vulnerabilities
Vulnerabilities for packages: uutils...
CVE-2026-35368 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-MH5C-XRMH-M794 vulnerabilities
Vulnerabilities for packages: uutils...
CVE-2026-35368 vulnerabilities
Vulnerabilities for packages: uutils...
CVE-2026-35376 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-6G8R-74QP-6859 vulnerabilities
Vulnerabilities for packages: uutils...
CVE-2026-35348 vulnerabilities
Vulnerabilities for packages: uutils...