Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: junegunn Clear all filters
TI-2026-79257 CVE-2026-115319 · GHSA-9q8r-c9q4-p63h

Denial of service in fzf via maskActionContents

Priority LOW 10

fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server through quadratic string concatenation.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00101 Published 2026-10-22 No fix listed CWE-407
TI-2026-38515 CVE-2026-53433 · GHSA-mvmf-94v6-879g

Denial of Service in fzf

Priority LOW 26

fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complex…

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00378 Published 2026-06-30 Fixed in 0.73.1 CWE-407
TI-2026-38514 CVE-2026-53432 · GHSA-rrf5-grxg-q8mm

Integer Overflow in fzf

Priority LOW 26

fzf is vulnerable to Integer Overflow leading to crash in FuzzyMatchV2 function.

CVSS 4.0MEDIUM 5.6 Local No auth User interaction EPSS 0.00419 Published 2026-06-30 Fixed in 0.73.1 CWE-190