~ / search / GHSA-r3r5-jhw6-4634

GHSA-r3r5-jhw6-4634

Insecure temporary file usage in SWHKD

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-27818

Packages

EcosystemPackageAffectedFixed in
crates.io Simple-Wayland-HotKey-Daemon < 1.2.0 1.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.

References

External links from the advisory. They lead to third-party sites.