from 0, <= 0.8.0
HIGH7.3CVE-2026-35338Duplicate Advisory: uutils coreutils allows users to bypass the --preserve-root safety mechanism from 0, < 0.6.0
HIGH7.1CVE-2026-35341Duplicate Advisory: uutils coreutils allows unauthorized modification of permissions on existing files from 0, <= 0.8.0
HIGH7.0uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
from 0, <= 0.8.0
MEDIUM6.7Duplicate Advisory: uutils coreutils has a Link Following Issue Via rm Utility
from 0, < 0.7.0
MEDIUM6.6uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails
from 0, <= 0.8.0
MEDIUM6.6mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)
from 0, < 0.7.0
MEDIUM6.3Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
from 0, < 0.7.0
MEDIUM6.3Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
from 0, < 0.6.0
MEDIUM6.3uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, <= 0.8.0
MEDIUM6.3uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, <= 0.8.0
MEDIUM6.3uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, <= 0.8.0
MEDIUM5.6Duplicate Advisory: uutils coreutils has a Path Traversal issue
from 0, <= 0.8.0
MEDIUM5.5Duplicate Advisory: uutils coreutils incorrectly handles exit codes when processing multiple files
from 0, < 0.6.0
MEDIUM5.5uutils coreutils has an Improper Input Validation Issue in its cut Utility
from 0, < 0.8.0
MEDIUM5.5uutils coreutils has an Uncaught Exception When Encountering Valid but Non-UTF-8 Paths
from 0, <= 0.8.0
MEDIUM5.5kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)
from 0, < 0.6.0
MEDIUM5.5Duplicate Advisory: uutils coreutils has an Incorrect Check of Function Return Value
from 0, < 0.6.0
MEDIUM5.3uutils coreutils has a Link Following Issue
from 0, <= 0.8.0
MEDIUM5.0uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue
from 0, < 0.8.0
MEDIUM4.7uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, <= 0.8.0
MEDIUM4.7uutils coreutils has a Link Following issue
from 0, <= 0.8.0
MEDIUM4.7uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
from 0, <= 0.8.0
MEDIUM4.5uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, <= 0.8.0
MEDIUM4.4Duplicate Advisory: uutils coreutils' comm utility incorrectly consumes data from non-regular file inputs before performing comparison operations
from 0, < 0.6.0
MEDIUM4.4Duplicate Advisory: uutils coreutils has an Incorrect Authorization issue
from 0, <= 0.8.0
MEDIUM4.4cp: -R reads device nodes as streams, destroying device semantics
from 0, < 0.7.0
MEDIUM4.4printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)
from 0, < 0.6.0
MEDIUM4.2uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries
from 0, <= 0.8.0
LOW3.6uucore: safe_traversal TOCTOU protection only enabled on Linux
from 0, < 0.6.0
LOW3.4mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)
from 0, < 0.6.0
LOW3.3Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
from 0, < 0.6.0
LOW3.3Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue
from 0, <= 0.8.0
LOW3.3Duplicate Advisory: coreutils' comm utility silently corrupts data by performing lossy UTF-8 conversion on all output lines
from 0, < 0.6.0
LOW3.3uutils coreutils has an Incorrect Short Circuit Evaluation Issue
from 0, < 0.8.0
LOW3.3uutils coreutils has an Improper Input Validation Issue in its env Utility
from 0, <= 0.8.0
LOW3.3uutils coreutils has an Incorrect Provision of Specified Functionality Issue
from 0, < 0.8.0
LOW3.3uutils coreutils has an Improper Handling of Unicode Encoding Issue
from 0, < 0.8.0
LOW3.3cut: -s ignored in -z -d '' newline-delimiter mode
from 0, < 0.8.0
LOW3.3id: pretty-print uses effective GID instead of effective UID for name lookup
from 0, <= 0.8.0
LOW3.3uutils coreutils has an Incorrect Permission Assignment for Critical Resource
from 0, <= 0.8.0
LOW3.3uutils coreutils has an Unchecked Return Value Issue
from 0, <= 0.8.0
LOW3.3cut: -s (only-delimited) ignored when delimiter is a newline
from 0, < 0.7.0
LOW3.3mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
from 0, < 0.6.0