~ / search / GHSA-x446-3xhq-5xfp

GHSA-x446-3xhq-5xfp

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

Source: GitHub Advisory Database (reviewed) Low CVE-2022-27814

Packages

EcosystemPackageAffectedFixed in
crates.io Simple-Wayland-HotKey-Daemon < 1.2.0 1.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.

References

External links from the advisory. They lead to third-party sites.