Approved changes feed: RSS · Atom

cpe:2.3:a:sagemath:flintqs:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSagemath (cdd4bd87-7eca-56ed-bb9f-eac81d4430f5)
ProductFlintqs (fd114a20-1e45-5374-919d-535dcfc2cc41)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/flintqs purl2cpe 2026-06-01 10:16:52.665106
pkg:deb/ubuntu/flintqs purl2cpe 2026-06-01 10:16:52.665109
pkg:github/sagemath/flintqs purl2cpe 2026-06-01 10:16:52.665112
pkg:rpm/fedora/flintqs purl2cpe 2026-06-01 10:16:52.665114

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29465 vulnerable 2026-06-08 06:02:40.294827 Details available
SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS).
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-02-12T16:34:31.453Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.