{"action":"Upgrade uu_cut to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"uu_cut","cve_ids":["CVE-2026-35343"],"ecosystem":"crates.io","epss":0.00135,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-wv33-5pxh-r7j7","id":"tcs_01M5KF483PT6EMH1XYWY0ABN11","modified_at":"2026-07-06T20:11:29.930195Z","published_at":"2026-07-06T19:54:33Z","references":["https://osv.dev/vulnerability/GHSA-wv33-5pxh-r7j7","https://github.com/uutils/coreutils/security/advisories/GHSA-wv33-5pxh-r7j7","https://nvd.nist.gov/vuln/detail/CVE-2026-35343","https://github.com/uutils/coreutils/pull/11143","https://github.com/uutils/coreutils/commit/9bbb58b746c41802278b0cba738eebbf21517cf7","https://github.com/uutils/coreutils","https://github.com/uutils/coreutils/releases/tag/0.7.0"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-wv33-5pxh-r7j7","url":"https://osv.dev/vulnerability/GHSA-wv33-5pxh-r7j7"}],"summary":"cut: -s (only-delimited) ignored when delimiter is a newline"}