{"action":"Upgrade uu_mknod to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"uu_mknod","cve_ids":["CVE-2026-35361"],"ecosystem":"crates.io","epss":0.00142,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-r9hw-mj3w-phcq","id":"tcs_01M5KF3128Y838DT6HN2TRRMFV","modified_at":"2026-07-06T22:11:17.087839Z","published_at":"2026-07-06T21:54:05Z","references":["https://osv.dev/vulnerability/GHSA-r9hw-mj3w-phcq","https://github.com/uutils/coreutils/security/advisories/GHSA-r9hw-mj3w-phcq","https://nvd.nist.gov/vuln/detail/CVE-2026-35361","https://github.com/uutils/coreutils/pull/10582","https://github.com/uutils/coreutils/commit/42b2ad83cdcf6e959ecb378c5040c60d9c64becf","https://github.com/uutils/coreutils","https://github.com/uutils/coreutils/releases/tag/0.6.0"],"severity":{"label":"low","score":3.4},"sources":[{"source":"osv","source_id":"GHSA-r9hw-mj3w-phcq","url":"https://osv.dev/vulnerability/GHSA-r9hw-mj3w-phcq"}],"summary":"mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)"}