{"action":"Upgrade uu_comm to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"uu_comm","cve_ids":["CVE-2026-35346"],"ecosystem":"crates.io","epss":0.00176,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-6gcw-w7cp-94g9","id":"tcs_01M5KETP3Y745S5FE19ZAA6WFW","modified_at":"2026-07-06T20:11:29.621574Z","published_at":"2026-07-06T19:51:22Z","references":["https://osv.dev/vulnerability/GHSA-6gcw-w7cp-94g9","https://github.com/uutils/coreutils/security/advisories/GHSA-6gcw-w7cp-94g9","https://nvd.nist.gov/vuln/detail/CVE-2026-35346","https://github.com/uutils/coreutils/issues/10192","https://github.com/uutils/coreutils/pull/10206","https://github.com/uutils/coreutils/commit/b9372e509ea9b278fe13763237067a261bb8c946","https://github.com/uutils/coreutils","https://github.com/uutils/coreutils/releases/tag/0.6.0"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-6gcw-w7cp-94g9","url":"https://osv.dev/vulnerability/GHSA-6gcw-w7cp-94g9"}],"summary":"comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output"}