CVE-2026-35363
1 advisory.
crates.io/uu_rm CVE-2026-35363: medium 5.6, EPSS 0.17%
rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
Action: Upgrade uu_rm to 0.6.0 or later.
cargo update -p uu_rm --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-89p7-7cq3-hhr2
- https://github.com/uutils/coreutils/security/advisories/GHSA-89p7-7cq3-hhr2
- https://nvd.nist.gov/vuln/detail/CVE-2026-35363
- https://github.com/uutils/coreutils/issues/9749
- https://github.com/uutils/coreutils
CVE-2026-35363 · published · modified · JSON