Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.4 views

uutils coreutils has an Incorrect Short Circuit Evaluation Issue

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.5AI score0.00018EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.1 views

PT-2026-34514

A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...

3.3CVSS5.9AI score0.00018EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.4 views

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from a logical error in the expr function. This error causes the subexpressions within parentheses to be evaluated during the parsing phase rather...

3.3CVSS5.9AI score0.00018EPSS
Exploits1References1
Fedora
Fedora
added 2026/03/28 12:19 a.m.2 views

[SECURITY] Fedora 44 Update: perl-XML-Parser-2.51-1.fc44

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options...

9.8CVSS5.8AI score0.00035EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2020/09/01 3:17 p.m.24 views

Regular Expression Denial of Service in ansi2html

The ansi2html package is affected by a regular expression denial of service vulnerability when certain types of user input is passed in. Proof of concept var ansi2html = require'ansi2html' var start = process.hrtime; ansi2html"1111111111111111111111;0000000000000000000000";...

7.5CVSS7.2AI score0.00334EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder