Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

pleaser

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
crates.io

Advisories 4

  • please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl.

    Affected: all versions; through 0.5.4.

  • Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at…

    Affected: fixed in 0.4.0; fixed in 0.4.0.

  • pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory.

    Affected: fixed in 0.4.0; fixed in 0.4.0.

  • please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged…

    Affected: fixed in 0.4.0; fixed in 0.4.0.