Vendor

editorconfig

3 known vulnerabilities.

Products

editorconfig-core-c 2 EditorConfig C Core 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.6

CVE-2026-40489 Public exploit

editorconfig-core-c has incomplete fix for CVE-2023-0341

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ec_glob() that allows an attacker to crash any application using libeditorconfig…

editorconfig editorconfig-core-c editorconfig-core editorconfig-core Debian Ubuntu Alpine

Apr 18, 2026
High 7.8

CVE-2023-0341

Stack Buffer Overflow in editorconfig-core-c

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by boun…

editorconfig EditorConfig C Core editorconfig-core editorconfig-core Debian Ubuntu

Jan 31, 2023