CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

CVE-2026-53788

CVE-2026-53788 affects rsync prior to 3.5.0. A newline injection in the name-converter uid/gid mapping interface lets local attackers forge protocol messages by embedding newline characters in user/group names, causing the rsync daemon to treat attacker-controlled data as legitimate protocol inpu...

CVE-2026-53788

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

EUVD-2026-58094

rsync tbefore 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns a...

CVE-2026-53798 rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an...

CVE-2026-53798

CVE-2026-53798 affects rsync before 3.5.0. A privilege-confusion in the name-converter subprocess uid/gid mapping can let a local attacker cause transferred files to be owned by root. If the name-converter returns an empty uid/gid lookup (or signals fake super-user status), rsync may treat uid/gi...

CVE-2026-53798

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an...

CVE-2026-53798 rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an...

CVE-2026-53798

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an...

@costrict/csc (>=4.1.7, <=4.2.43), @schalkneethling/calavera-baseline-core (>=0.2.0-next.2, <=0.2.0) +3 more potentially affected by CVE-2026-45819 via baseline-browser-mapping (>=2.8.4-beta3, <=2.10.43)

baseline-browser-mapping NPM version =2.8.4-beta3, =4.1.7, =0.2.0-next.2, =4.3.0, =4.3.2 Source cves: CVE-2026-45819 Source advisory: GHSA-W5VR-8V7Q-W6RV...

GHSA-W5VR-8V7Q-W6RV baseline-browser-mapping process termination on invalid input causes denial of service

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

baseline-browser-mapping process termination on invalid input causes denial of service

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

@costrict/csc (>=4.1.7, <=4.2.43), @schalkneethling/calavera-baseline-core (>=0.2.0-next.2, <=0.2.0) +3 more potentially affected by CVE-2026-45819 via baseline-browser-mapping (>=2.8.4-beta3, <=2.10.43)

baseline-browser-mapping NPM version =2.8.4-beta3, =4.1.7, =0.2.0-next.2, =4.3.0, =4.3.2 Source cves: CVE-2026-45819 Source advisory: OSV:GHSA-W5VR-8V7Q-W6RV...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

EUVD-2026-57788

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

CVE-2026-45819

The CVE-2026-45819 entry concerns the baseline-browser-mapping project: versions 2.x prior to 2.11.0. The underlying issue is that input validation failures cause the process to call process.exit() instead of throwing, which can lead to immediate process termination and a denial of service. No ex...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...

CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service...