Skip to content
OpenAdvisories

Package · crates.io

uu_comm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.4
    CVE-2026-35347

    uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input Validation

    The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The are_files_identical function opens and reads from both input paths to compare content without first verifying if the paths…

    uutils coreutils rust-coreutils rust-coreutils Debian Ubuntu crates.io
  • Low 3.3
    CVE-2026-35346

    uutils coreutils comm Silent Data Corruption via Lossy UTF-8 Normalization

    The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::from_utf8_lossy(), which replaces invalid UTF-8 byte sequences with the Unicode replacement character (U+FFFD…

    uutils coreutils rust-coreutils rust-coreutils Debian Ubuntu crates.io