uu_comm vulnerabilities
CVEs whose affected-version data names the uu_comm package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-35346Low· 3.3comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output
comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output
▾ Sunlituu_comm · uu_commEPSS 0.18%via GHSA
CVE-2026-35347Medium· 4.4comm: FIFO/pipe inputs are drained before comparison (data loss / hang)
comm: FIFO/pipe inputs are drained before comparison (data loss / hang)
▾ Sunlituu_comm · uu_commEPSS 0.14%via GHSA