uu_rm vulnerabilities
CVEs whose affected-version data names the uu_rm package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-35349Medium· 6.7rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
▾ Sunlituu_rm · uu_rmEPSS 0.18%via GHSA
CVE-2026-35363Medium· 5.6rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
▾ Sunlituu_rm · uu_rmEPSS 0.17%via GHSA