Critical Vulnerability in rust-coreutils: CVE-2026-35351
Summary
DEBIAN-CVE-2026-35351: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of utilities written in Rust that provide essential command-line functionalities for users in the Debian ecosystem. It is designed to be efficient and secure, leveraging Rust's memory safety features. However, vulnerabilities can arise, impacting the reliability and security of applications that depend on these utilities.
Vulnerability Detail
CVE-2026-35351 is a vulnerability identified in rust-coreutils that allows for potential exploitation due to improper handling of certain inputs. This vulnerability could lead to unexpected behavior, including crashes or unauthorized access to sensitive data. The issue originates from the core implementation of the utilities, which may not adequately validate user inputs, making it susceptible to various attack vectors.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can avoid using the affected functionalities of rust-coreutils until the package is updated. Additionally, implementing input validation in scripts that utilize these utilities may help mitigate the risk until a patch is applied.
Conclusion
CVE-2026-35351 poses a significant risk to users of rust-coreutils in Debian. It is crucial to stay informed about such vulnerabilities and apply updates promptly to maintain the security and integrity of your applications.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35351 is a vulnerability in the rust-coreutils package that can lead to unexpected behavior and potential security risks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, consider implementing input validation in your scripts and avoid using the affected functionalities.
More information can be found in the official CVE database and on the Debian security advisory pages.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
