{"action":"Upgrade uu_chmod to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"uu_chmod","cve_ids":["CVE-2026-35338"],"ecosystem":"crates.io","epss":0.00175,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-4c7q-4928-8445","id":"tcs_01M5KESH7KYA9ETQ35EAJ9JXSD","modified_at":"2026-07-06T17:56:19.992916Z","published_at":"2026-07-06T17:41:45Z","references":["https://osv.dev/vulnerability/GHSA-4c7q-4928-8445","https://github.com/uutils/coreutils/security/advisories/GHSA-4c7q-4928-8445","https://nvd.nist.gov/vuln/detail/CVE-2026-35338","https://github.com/uutils/coreutils/pull/10033","https://github.com/uutils/coreutils/commit/413055b378fa6fe2299c5e5f538c8e6e841ab810","https://github.com/uutils/coreutils","https://github.com/uutils/coreutils/releases/tag/0.6.0"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-4c7q-4928-8445","url":"https://osv.dev/vulnerability/GHSA-4c7q-4928-8445"}],"summary":"chmod: --preserve-root bypassed by any path that resolves to root (e.g. /../)"}