Summary
It was discovered that EditorConfig incorrectly handled specially crafted
configuration files. A local attacker could possibly use this issue to
cause EditorConfig to crash, resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | editorconfig-core | 0.12.7-0.1ubuntu0.1 |
| Ubuntu · 25.10 | editorconfig-core | 0.12.9+~0.17.1-1ubuntu2.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | editorconfig-core | 0.12.10+~0.17.1-3ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-40489