junegunn CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW junegunn CVE published 2026-10-22

CVE-2026-115319

CVE-2026-115319 is a denial-of-service vulnerability affecting fzf versions 0.36.0 through 0.74.5. The vulnerability is due to inefficient algorithmic complexity in maskActionContents, allowing local attackers to exhaust the --listen HTTP server through quadratic string concatenation. Users should assess exposure and prioritize patching. This vulnerability can cause denial-of-service conditions, and the s [truncated]