RUSTSEC-2025-0139
High · 7.3CVSS
7.3
EPSS
—
Published
Dec 30, 2025
CISA due date
—
The record
theshit vulnerable to unsafe loading of user-owned Python rules when running as root
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | theshit | 0 | 0.1.1 |
| crates.io | theshit | 0.0.0-0 | 0.1.1 |
Related vulnerabilities
- CVE-2025-69257 theshit is a command-line utility that automatically detects and fixes common mistakes in… Same vulnerability
- CVE-2026-21882 theshit is a command-line utility that automatically detects and fixes common mistakes in… Also affects theshit
- GHSA-2j3p-gqw5-g59j theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command… Also affects theshit