GNU Bison güvenlik açıkları (CVE)

GNU Bison için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
4.6Orta
CVE-2026-56390

Arbitrary Output Location Change in GNU Bison

GNU Bison

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied gramm…

6.8Orta
CVE-2026-56389

Arbitrary Command Execution in GNU Bison

GNU Bison

GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define to…