Is coreutils safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-4wrp-79m8-9m9p · 2026-04-22uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
• VulnerabilityGHSA-5pv5-xh52-hvrp · 2026-04-22uutils coreutils has an Incorrect Short Circuit Evaluation Issue
• VulnerabilityGHSA-5v4g-vw9x-h534 · 2026-04-22uutils coreutils has an Improper Input Validation Issue in its env Utility
• VulnerabilityGHSA-6g8r-74qp-6859 · 2026-04-22uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
• VulnerabilityGHSA-fhr3-xh3q-69w6 · 2026-04-22uutils coreutils has an Incorrect Provision of Specified Functionality Issue
• VulnerabilityGHSA-m2pg-c7m6-77pj · 2026-04-22uutils coreutils has an Improper Input Validation Issue in its cut Utility
• VulnerabilityGHSA-vx9m-xjwf-8cqm · 2026-04-22uutils coreutils has an Improper Handling of Unicode Encoding Issue
• VulnerabilityGHSA-wq63-vh5h-pr5p · 2026-04-22uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue
• VulnerabilityGHSA-2m8x-mvfx-gwgj · 2026-04-22uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
• VulnerabilityGHSA-5hgf-628x-mcqf · 2026-04-22uutils coreutils has an Incorrect Permission Assignment for Critical Resource
• VulnerabilityGHSA-957r-r8gc-vv3h · 2026-04-22uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries
• VulnerabilityGHSA-9gh9-hwpr-rvqq · 2026-04-22uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
• VulnerabilityGHSA-f2jv-wjjc-2c94 · 2026-04-22uutils coreutils has an Uncaught Exception When Encountering Valid but Non-UTF-8 Paths
• VulnerabilityGHSA-hpfw-mqm3-33jh · 2026-04-22uutils coreutils has a Link Following issue
• VulnerabilityGHSA-m976-87wm-48fm · 2026-04-22uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
• VulnerabilityGHSA-mh5c-xrmh-m794 · 2026-04-22uutils coreutils has an Untrusted Search Path
• VulnerabilityGHSA-q6m9-xj2w-xmrc · 2026-04-22uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
• VulnerabilityGHSA-wh8p-h9hw-x2mc · 2026-04-22uutils coreutils has an Unchecked Return Value Issue
• VulnerabilityGHSA-x2wv-9p67-mh9w · 2026-04-22uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails
• VulnerabilityGHSA-x4mc-mqm7-gg39 · 2026-04-22uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition
• VulnerabilityGHSA-xf75-659h-cgg5 · 2026-04-22uutils coreutils has a Link Following Issue

Check your version

Run cargo tree -i coreutils to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.