coreutils (crates.io)
Advisories
44
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.8.0 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p coreutils --precise 0.8.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-532v-xp3f-837c Duplicate Advisory: uutils coreutils has an Incorrect Provision of Specified Functionality Issue in its cut Utility Withdrawn |
Low | < 0.8.0 | 0.8.0 |
| GHSA-xh5h-p8c5-4w4x Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue Withdrawn |
Low | <= 0.8.0 | No fix yet |
| GHSA-q94g-3gcf-66x7 Duplicate Advisory: uutils coreutils has an Incorrect Authorization issue Withdrawn |
Medium | <= 0.8.0 | No fix yet |
| GHSA-53gr-wmf4-8hh3 Duplicate Advisory: uutils coreutils's User Interface (UI) Misrepresents Critical Information Withdrawn |
Low | <= 0.8.0 | No fix yet |
| GHSA-79rc-qpw3-jv92 Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue Withdrawn |
Low | < 0.6.0 | 0.6.0 |
| GHSA-gpcg-h6x2-c26p Duplicate Advisory: uutils coreutils has an Improper Input Validation issue Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-ggc5-46rg-mr4v Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition Withdrawn |
Low | < 0.6.0 | 0.6.0 |
| GHSA-66fx-fqv6-5wwx Duplicate Advisory: uutils coreutils has a Link Following issue Withdrawn |
Medium | < 0.7.0 | 0.7.0 |
| GHSA-67hp-f6hq-2h6g Duplicate Advisory: uutils coreutils Uses Incorrectly-Resolved Name or Reference Withdrawn |
Medium | < 0.7.0 | 0.7.0 |
| GHSA-7259-cwhx-3xx3 Duplicate Advisory: uutils coreutils has an Improper Check for Unusual or Exceptional Conditions Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-hj9r-8pfm-rmjj Duplicate Advisory: uutils coreutils has an Issue With its Always-Incorrect Control Flow Implementation Withdrawn |
Low | < 0.7.0 | 0.7.0 |
| GHSA-hwhf-8p2f-45wr Duplicate Advisory: coreutils' comm utility silently corrupts data by performing lossy UTF-8 conversion on all output lines Withdrawn |
Low | < 0.6.0 | 0.6.0 |
| GHSA-m26v-hjq3-x245 Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition Withdrawn |
Medium | < 0.7.0 | 0.7.0 |
| GHSA-v24v-f45g-w7jf Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-rx8h-33gr-vhj9 Duplicate Advisory: uutils coreutils' comm utility incorrectly consumes data from non-regular file inputs before performing comparison operations Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-v762-x3cf-5mfg Duplicate Advisory: uutils coreutils has a Link Following Issue Via rm Utility Withdrawn |
Medium | < 0.7.0 | 0.7.0 |
| GHSA-vf87-345h-9qhx Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition Withdrawn |
Low | < 0.6.0 | 0.6.0 |
| GHSA-vchc-9ggh-3236 Duplicate Advisory: uutils coreutils has a Path Traversal issue Withdrawn |
Medium | <= 0.8.0 | No fix yet |
| GHSA-9gqx-53gp-c8g3 Duplicate Advisory: uutils coreutils allows users to bypass the --preserve-root safety mechanism Withdrawn |
High | < 0.6.0 | 0.6.0 |
| GHSA-vp6q-mv9j-j428 Duplicate Advisory: uutils coreutils incorrectly handles exit codes when processing multiple files Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-2cxp-xq3c-mjxx Duplicate Advisory: uutils coreutils' mktemp utility doesn't properly handle an empty TMPDIR environment variable Withdrawn |
Low | < 0.6.0 | 0.6.0 |
| GHSA-w8m4-4v35-v6x3 Duplicate Advisory: uutils coreutils allows unauthorized modification of permissions on existing files Withdrawn |
High | <= 0.8.0 | No fix yet |
| GHSA-88ch-q68x-36v7 Duplicate Advisory: uutils coreutils has an Incorrect Check of Function Return Value Withdrawn |
Medium | < 0.6.0 | 0.6.0 |
| GHSA-m2pg-c7m6-77pj uutils coreutils has an Improper Input Validation Issue in its cut Utility |
Medium EPSS 0.16% |
< 0.8.0 | 0.8.0 |
| GHSA-fhr3-xh3q-69w6 uutils coreutils has an Incorrect Provision of Specified Functionality Issue |
Low EPSS 0.15% |
< 0.8.0 | 0.8.0 |
| GHSA-5pv5-xh52-hvrp uutils coreutils has an Incorrect Short Circuit Evaluation Issue |
Low EPSS 0.16% |
< 0.8.0 | 0.8.0 |
| GHSA-5v4g-vw9x-h534 uutils coreutils has an Improper Input Validation Issue in its env Utility |
Low EPSS 0.10% |
<= 0.8.0 | No fix yet |
| GHSA-6g8r-74qp-6859 uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition |
Medium EPSS 0.11% |
<= 0.8.0 | No fix yet |
| GHSA-vx9m-xjwf-8cqm uutils coreutils has an Improper Handling of Unicode Encoding Issue |
Low EPSS 0.14% |
< 0.8.0 | 0.8.0 |
| GHSA-4wrp-79m8-9m9p uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition |
Medium EPSS 0.07% |
<= 0.8.0 | No fix yet |
| GHSA-wq63-vh5h-pr5p uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue |
Medium EPSS 0.14% |
< 0.8.0 | 0.8.0 |
| GHSA-mh5c-xrmh-m794 uutils coreutils has an Untrusted Search Path |
High EPSS 0.14% |
<= 0.8.0 | No fix yet |
| GHSA-5hgf-628x-mcqf uutils coreutils has an Incorrect Permission Assignment for Critical Resource |
Low EPSS 0.11% |
<= 0.8.0 | No fix yet |
| GHSA-m976-87wm-48fm uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition |
Medium EPSS 0.09% |
<= 0.8.0 | No fix yet |
| GHSA-q6m9-xj2w-xmrc uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition |
Medium EPSS 0.10% |
<= 0.8.0 | No fix yet |
| GHSA-hpfw-mqm3-33jh uutils coreutils has a Link Following issue |
Medium EPSS 0.13% |
<= 0.8.0 | No fix yet |
| GHSA-2m8x-mvfx-gwgj uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition |
Medium EPSS 0.09% |
<= 0.8.0 | No fix yet |
| GHSA-x4mc-mqm7-gg39 uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition |
Medium EPSS 0.11% |
<= 0.8.0 | No fix yet |
| GHSA-9gh9-hwpr-rvqq uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition |
High EPSS 0.15% |
<= 0.8.0 | No fix yet |
| GHSA-957r-r8gc-vv3h uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries |
Medium EPSS 0.13% |
<= 0.8.0 | No fix yet |
| GHSA-x2wv-9p67-mh9w uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails |
Medium EPSS 0.12% |
<= 0.8.0 | No fix yet |
| GHSA-f2jv-wjjc-2c94 uutils coreutils has an Uncaught Exception When Encountering Valid but Non-UTF-8 Paths |
Medium EPSS 0.13% |
<= 0.8.0 | No fix yet |
| GHSA-xf75-659h-cgg5 uutils coreutils has a Link Following Issue |
Medium EPSS 0.10% |
<= 0.8.0 | No fix yet |
| GHSA-wh8p-h9hw-x2mc uutils coreutils has an Unchecked Return Value Issue |
Low EPSS 0.11% |
<= 0.8.0 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor