Threats tagged 'ghsa-96gh-683j-p43h'

nnn versions through 5.3 have an insecure file handling vulnerability where the main() function accepts an existing NNN_FIFO path without verifying it is a FIFO. This allows local attackers to pre-create the predictable /tmp/nnn.fifo path as a symlink or regular file, potentially redirecting writes to overwrite victim-writable files or leak browsed paths.