Security advisories

medium2026-07-06

CVE-2026-35347-comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

uutils/coreutils · GHSA-3wfc-mgpm-9rq6

medium2026-07-06

CVE-2026-35370-id: groups= computed from real GID instead of effective GID

uutils/coreutils · GHSA-47c7-qrm7-mqw7

low2026-07-06

CVE-2026-35353-mkdir: -m exposes directory with umask perms before chmod (race window)

uutils/coreutils · GHSA-mj6p-44ch-cq69

medium2026-07-06

CVE-2026-35349-rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

uutils/coreutils · GHSA-7cr3-h577-g38j

low2026-07-06

CVE-2026-35371-id: pretty-print uses effective GID instead of effective UID for name lookup

uutils/coreutils · GHSA-xv5w-cw7x-72gj

medium2026-07-06

CVE-2026-35369-kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)

uutils/coreutils · GHSA-p6rv-2qpm-fwvg

medium2026-07-06

CVE-2026-35356-install -D: symlink race in directory creation allows arbitrary file overwrite

uutils/coreutils · GHSA-gwm6-q8ch-hcfr

low2026-07-06

CVE-2026-35343-cut: -s (only-delimited) ignored when delimiter is a newline

uutils/coreutils · GHSA-wv33-5pxh-r7j7

medium2026-07-06

CVE-2026-35355-install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite

uutils/coreutils · GHSA-239g-2685-54x3

low2026-07-06

CVE-2026-35373-ln: rejects non-UTF-8 source filenames in target-directory mode

uutils/coreutils · GHSA-jcjr-rh8q-7xqf

low2026-07-06

CVE-2026-35346-comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output

uutils/coreutils · GHSA-6gcw-w7cp-94g9

low2026-07-06

CVE-2026-35342-mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

uutils/coreutils · GHSA-2w8r-9xj7-69j5

medium2026-07-06

CVE-2026-35339-chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)

uutils/coreutils · GHSA-4x34-chg5-mwjj

high2026-07-06

CVE-2026-35338-chmod: --preserve-root bypassed by any path that resolves to root (e.g. /../)

uutils/coreutils · GHSA-4c7q-4928-8445

high2026-07-06

CVE-2026-55786-flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`

flytohub/flyto-core · GHSA-h9f9-h6gm-wc85

high2026-07-06

CVE-2026-55787-flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf

flytohub/flyto-core · GHSA-794r-5rp2-fpg8

high2026-07-06

Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)

scriban/scriban · GHSA-7jvp-hj45-2f2m

medium2026-07-06

CVE-2026-49452-WeasyPrint has CSS Injection via Presentational Hints

kozea/weasyprint · GHSA-jhhc-3hcp-qhm5

critical2026-07-06

CVE-2026-49445-Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

cilium/cilium · GHSA-3fcv-jvfp-m4q9

medium2026-07-06

CVE-2026-49439-OpenRemote read-only asset users can write predicted datapoints

openremote/openremote · GHSA-xj53-j257-hxvg