Vulnerabilities

TI-2026-29240 CVE-2026-40489

editorconfig-core-c has incomplete fix for CVE-2023-0341

HIGH 72

editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00151 Published 2026-04-18 Fixed in 0.12.11 CWE-121

TI-2024-36045 CVE-2024-53849

Several stack buffer overflows and pointer overflows in editorconfig-core-c

LOW 23

editorconfig-core-c is theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing).

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00204 Published 2024-11-26 Fixed in 0.12.7 CWE-121

TI-2023-00325 CVE-2023-0341 · GHSA-f352-cwm8-5w9w

Stack Buffer Overflow in editorconfig-core-c

HIGH 69

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00957 Published 2023-01-31 Fixed in v0.12.6 CWE-121

Vulnerabilities

Filters

editorconfig-core-c has incomplete fix for CVE-2023-0341

Several stack buffer overflows and pointer overflows in editorconfig-core-c

Stack Buffer Overflow in editorconfig-core-c