Skip to content
OpenAdvisories

Package · Debian

rust-broot

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.6

    broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View

    broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain to_string_lossy() call in src/tree_build/builder.rs and in TreeLine::unprune in src/tree/tree_line.rs, and no control…