Read the docs

junegunn

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

junegunn records in CISA KEV

No junegunn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fzf 2 records LOW

Records

3 records

TI-2026-38515 CVE-2026-53433 · GHSA-mvmf-94v6-879g

Denial of Service in fzf

Priority LOW 26

fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complex…

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00378 Published 2026-06-30 Fixed in 0.73.1 CWE-407
TI-2026-38514 CVE-2026-53432 · GHSA-rrf5-grxg-q8mm

Integer Overflow in fzf

Priority LOW 26

fzf is vulnerable to Integer Overflow leading to crash in FuzzyMatchV2 function.

CVSS 4.0MEDIUM 5.6 Local No auth User interaction EPSS 0.00419 Published 2026-06-30 Fixed in 0.73.1 CWE-190
TI-2026-79257 CVE-2026-115319 · GHSA-9q8r-c9q4-p63h

Denial of service in fzf via maskActionContents

Priority LOW 10

fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server through quadratic string concatenation.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00101 Published 2026-10-22 No fix listed CWE-407
Open these records in search →