{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"rust-coreutils","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NRTVZM3FFXQAX8FTCZSZF4","modified_at":"2026-10-26T11:47:25.984322307Z","published_at":"2026-04-22T17:16:40.987Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-35371","https://security-tracker.debian.org/tracker/CVE-2026-35371"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-35371","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-35371"}],"summary":"The id utility in uutils coreutils exhibits incorrect behavior in its \"pretty print\" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of"}