GHSA-q428-6v73-fc4q
Medium · 4.4CVSS
4.4
EPSS
—
Published
Nov 13, 2025
CISA due date
—
The record
sudo-rs doesn't record authenticating user properly in timestamp
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | sudo-rs | 0.2.5 | 0.2.10 |
| cargo | sudo-rs | 0.2.5 | 0.2.10 |
Related vulnerabilities
- CVE-2025-64517 sudo-rs is a memory safe implementation of sudo and su written in Rust. Same vulnerability
- GHSA-c978-wq47-pvvw sudo-rs: Partial password reveal is possible after timeout Also affects sudo-rs
- CVE-2025-64170 sudo-rs is a memory safe implementation of sudo and su written in Rust. Also affects sudo-rs
- CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287
- CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass… CWE-287
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-287
- CVE-2026-107228 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-287
- CVE-2026-86781 The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40… CWE-287