editorconfig

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

editorconfig records in CISA KEV

No editorconfig vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Editorconfig 1 record HIGH

Records

3 records

TI-2026-29240 CVE-2026-40489

editorconfig-core-c has incomplete fix for CVE-2023-0341

HIGH 72

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00151 Published 2026-04-18 Fixed in 0.12.11 CWE-121

TI-2023-00325 CVE-2023-0341 · GHSA-f352-cwm8-5w9w

Stack Buffer Overflow in editorconfig-core-c

HIGH 69

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00957 Published 2023-01-31 Fixed in v0.12.6 CWE-121

TI-2024-36045 CVE-2024-53849

Several stack buffer overflows and pointer overflows in editorconfig-core-c

LOW 23

editorconfig-core-c is theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing).

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00204 Published 2024-11-26 Fixed in 0.12.7 CWE-121

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0