CVE-2022-27817

Description

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality.

How to fix CVE-2022-27817

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• crates.io/Simple-Wayland-HotKey-Daemon—no fix listed

Is CVE-2022-27817 being exploited?

Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, <= 1.1.5

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-27817
• PATCHgithub.com/waycrate/swhkd
• WEBgithub.com/waycrate/swhkd/releases
• WEBwww.openwall.com/lists/oss-security/2022/04/14/1