coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35381 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35381 Source advisory: OSV:GHSA-PMFC-4WJJ-GMHX...

CVE-2026-35381

A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s only-delimited flag when using the -z null-terminated and -d '' empty delimiter options together. The implementation incorrectly routes this specific combination through a specialized newline-delimiter code...

CVE-2026-35381

CVE-2026-35381 describes a logic error in the cut utility of the uutils coreutils project. When using -z (null-terminated) and -d '' (empty delimiter) together with -s (only-delimited), the code path incorrectly routes the case to a newline-delimiter handler that does not check record suppression...