Skip to content
OpenAdvisories

Package · crates.io

uucore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-fqf6-gxhh-2xhw

    uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)

    `determine_backup_mode` in `src/uucore/src/lib/features/backup_control.rs` only checks `--backup`/`-b` and returns `BackupMode::None` when only `--suffix` is given. GNU enables backup mode when `--suffix` is used alone (defaulting to existing/numbered, or `$V…

    uucore crates.io
  • Low 3.6
    CVE-2026-35362

    uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module

    The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and…

    uutils coreutils rust-coreutils rust-coreutils Debian Ubuntu crates.io