HIGH7.1

GHSA-8m49-2xj8-67v9

Data Loss/Denial of Service in SWHKD

Details

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the `1.1.0` branch of the repository.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/Simple-Wayland-HotKey-Daemon

Introduced in: 0Fixed in: 1.2.0

Upgrade Simple-Wayland-HotKey-Daemon to 1.2.0 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2022-27816[ADVISORY]
https://github.com/waycrate/swhkd/commit/0b620a09605afb815c6d8d8953bbb7a10a8c0575[WEB]
https://github.com/waycrate/swhkd[PACKAGE]
https://github.com/waycrate/swhkd/releases/tag/1.2.0[WEB]
http://www.openwall.com/lists/oss-security/2022/04/14/1[WEB]