CVE-2026-35366
1 advisory.
crates.io/uu_printenv CVE-2026-35366: medium 4.4
printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)
Action: Upgrade uu_printenv to 0.6.0 or later.
cargo update -p uu_printenv --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-p7h3-7q52-72w8
- https://github.com/uutils/coreutils/security/advisories/GHSA-p7h3-7q52-72w8
- https://nvd.nist.gov/vuln/detail/CVE-2026-35366
- https://github.com/uutils/coreutils/issues/9701
- https://github.com/uutils/coreutils/pull/9728
- https://github.com/uutils/coreutils/commit/0bfbbc00c7895c0fb6ea94987b4aab99e3d7ee52
- https://github.com/uutils/coreutils
- https://github.com/uutils/coreutils/releases/tag/0.6.0
CVE-2026-35366 · published · modified · JSON