MEDIUM6.7crates.io
GHSA-7cr3-h577-g38j· CVE-2026-35349rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
Modified: 7/6/2026
package
pkg:crates.io/uu_rm
rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
Modified: 7/6/2026
rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
Modified: 7/6/2026