Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-9810
6.8
MEDIUMCVSS v3
Published
September 1, 2025
Affected
1 project
Assigned by
96148269-fe82-4198-b1bf-3a73ce8bc92e
Severity scale
010
Description
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.
antirez/linenoise
GitHubA small self-contained alternative to readline and libedit
GitHubA small self-contained alternative to readline and libedit= 1.0, all versionsNVD