Approved changes feed: RSS · Atom

cpe:2.3:a:antirez:linenoise:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAntirez (11384bc0-5222-5464-a653-0aa5c6fbf6c8)
ProductLinenoise (61702a51-6ef1-529d-9751-0d86b43bc1a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/antirez/linenoise purl2cpe 2026-06-01 10:12:25.938985
pkg:rpm/fedora/linenoise purl2cpe 2026-06-01 10:12:25.938988

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9810 vulnerable 2026-06-08 07:47:09.971618 TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes
MEDIUM (6.8)
TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
Published: 2025-09-01T19:03:19.540Z
Updated: 2026-04-22T15:06:11.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.