MEDIUM4.4

GHSA-h5wh-7h2j-h999

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

Details

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/Simple-Wayland-HotKey-Daemon

Introduced in: 0

No fixed version published yet for Simple-Wayland-HotKey-Daemon. Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-27817[ADVISORY]
https://github.com/waycrate/swhkd[PACKAGE]
https://github.com/waycrate/swhkd/releases[WEB]
https://www.openwall.com/lists/oss-security/2022/04/14/1[WEB]