MEDIUM6.3crates.io
GHSA-239g-2685-54x3· CVE-2026-35355install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite
Modified: 7/6/2026
package
pkg:crates.io/uu_install
install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite
Modified: 7/6/2026
install -D: symlink race in directory creation allows arbitrary file overwrite
Modified: 7/6/2026