Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Patched Functions
Uutils
Coreutils

uutils/coreutils: Functions Patched by CVE Fixes

rust

#163 of 500 repositories

uutils/coreutils

Functions and files changed by CVE fixes in this repository.

Latest located fix September 18, 2026

29

CVE fixes located

Published CVEs

145

Functions patched

Distinct function sites

37

Files patched

Distinct source files

2021–2026

Years covered

By CVE publication date

Overview

29 published CVEs have a fix traced to functions in uutils/coreutils, the earliest published in 2021. Those fixes changed 145 distinct functions across 37 files, in 485 patch hunks.

Among the 500 repositories tracked here, uutils/coreutils ranks #163 by the number of CVEs with a located fix.

Most patched functions

Functions in uutils/coreutils changed by the most CVE fixes.

1directorysrc/uu/install/src/install.rs2 CVEs · 4 patches2026
2cut_fieldssrc/uu/cut/src/cut.rs2 CVEs · 4 patches2026
3need_copysrc/uu/install/src/install.rs2 CVEs · 4 patches2026
4copysrc/uu/install/src/install.rs2 CVEs · 4 patches2026
5safe_remove_dir_recursivesrc/uu/rm/src/platform/unix.rs2 CVEs · 4 patches2026
6safe_remove_dir_recursive_implsrc/uu/rm/src/platform/unix.rs2 CVEs · 4 patches2026
7safe_dusrc/uu/du/src/du.rs2 CVEs · 4 patches2026
8copy_filesrc/uu/cp/src/cp.rs2 CVEs · 4 patches2026
9handle_no_preserve_modesrc/uu/cp/src/cp.rs2 CVEs · 4 patches2026
10copy_filesrc/uu/install/src/install.rs2 CVEs · 4 patches2026
11open_subdirsrc/uucore/src/lib/features/safe_traversal.rs2 CVEs · 3 patches2026
12set_ownership_and_permissionssrc/uu/install/src/install.rs1 CVEs · 2 patches2026
13cut_fields_newline_char_delimsrc/uu/cut/src/cut.rs1 CVEs · 2 patches2026
14mapsrc/uu/cut/src/cut.rs1 CVEs · 2 patches2026
15Somesrc/uu/cut/src/cut.rs1 CVEs · 2 patches2026

Most patched files

Files in uutils/coreutils changed by the most CVE fixes.

1src/uu/install/src/install.rs4 CVEs · 19 functions
2src/uu/chmod/src/chmod.rs4 CVEs · 4 functions
3src/uu/cut/src/cut.rs3 CVEs · 5 functions
4src/uucore/src/lib/features/safe_traversal.rs2 CVEs · 19 functions
5src/uu/rm/src/rm.rs2 CVEs · 10 functions
6src/uu/du/src/du.rs2 CVEs · 7 functions
7src/uu/split/src/platform/unix.rs2 CVEs · 7 functions
8src/uu/cp/src/cp.rs2 CVEs · 6 functions
9src/uu/rm/src/platform/unix.rs2 CVEs · 6 functions
10src/uu/comm/src/comm.rs2 CVEs · 4 functions

Fix size

How much code a CVE fix in uutils/coreutils changes, with backports counted once.

62

Median lines changed

Added plus removed, per CVE

34%

Fixes of 20 lines or fewer

Share of CVE fixes

31%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in uutils/coreutils, and the functions each fix changed.

uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid
CVE-2026-93658directory set_ownership_and_permissions
High · CVSS 7.3
EPSS 0.1%2026-09-18
uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering
CVE-2026-35381cut_fields cut_fields_newline_char_delim
Low · CVSS 3.3
EPSS 0.2%2026-04-22
uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter Parsing
CVE-2026-35380Some map
Medium · CVSS 5.5
EPSS 0.2%2026-04-22
uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling
CVE-2026-35379chain
Low · CVSS 3.3
EPSS 0.2%2026-04-22
uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized Subexpressions
CVE-2026-35378evaluated next AstNode
Low · CVSS 3.3
EPSS 0.2%2026-04-22
uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String Mode
CVE-2026-35377parse_braced_variable_name EnvInvalidBackslashAtEndOfStringInMinusS EnvAppData
Low · CVSS 3.3
EPSS 0.1%2026-04-22
uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race Condition
CVE-2026-35376last_entry_ref open_target_fd of_path
Medium · CVSS 5.8
EPSS 0.1%2026-04-22
uutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding
CVE-2026-35375open test_filename_iterator_preserves_non_utf8_bytes Iterator
Low · CVSS 3.3
EPSS 0.2%2026-04-22
uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition
CVE-2026-35374write create_or_truncate_output_file reopened_writer_rejects_symlink_swapped_to_input
Medium · CVSS 6.3
EPSS 0.1%2026-04-22
uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames
CVE-2026-35373file_name
Medium · CVSS 5.5
EPSS 0.1%2026-04-22
uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag
CVE-2026-35372is_symlink
Medium · CVSS 5.0
EPSS 0.2%2026-04-22
uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation
CVE-2026-35369handle_obsolete
Medium · CVSS 5.5
EPSS 0.2%2026-04-22

Get an alert for each new uutils/coreutils CVE, with the patched functions and AI-written analysis.

Monitor coreutils CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

android.googlesource.com/platform-frameworks-native29 CVEs ash-project/ash29 CVEs debian/cacti29 CVEs electron/electron29 CVEs matrix-org/synapse29 CVEs MervinPraison/PraisonAI29 CVEs mybb/mybb29 CVEs openstack/keystone29 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in uutils/coreutils.

How many CVEs have a located fix in uutils/coreutils?: 29 published CVEs have a fix traced to functions in uutils/coreutils, touching 145 functions across 37 files.
Which function in uutils/coreutils has been patched by the most CVEs?: directory in src/uu/install/src/install.rs has been changed by 2 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in uutils/coreutils?: The median fix changes 62 lines. 34% of fixes change 20 lines or fewer, and 31% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

uutils/coreutils on GitHub (opens in a new tab)
Patched functions directory
CWE directory: the weakness types behind these fixes

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track uutils/coreutils CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing

On this page

Overview
Most patched functions
Most patched files
Fix size
Latest CVEs
Other repositories
FAQ
References