Search results

security(workflow): CICD.yml is vulnerable to Shell Injection too and many workflow security best praticses are not here for multiple workflows, needs be fixed to the project not be the next victim of a supply chain attatck

Status: Open.

#12905 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(touch): miliatry prefixes that end with j not accepted by --date

U - touch

Status: Open.

#12903 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

gnucompability(stty): it accepts 0 for ispeed but the gnu one rejects it

U - stty

Status: Open.

#12902 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(stat): ./stat --format '%s' a > /dev/full panics

U - stat

Status: Open.

#12901 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(printf): panics when using a number like %-101727s

U - printf

Status: Open.

#12900 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(date): when using like +%50c and +%50x it produces padding 0s overlapping

U - date

Status: Open.

#12897 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(date): -s option rejects military times that end with j

U - date

Status: Open.

#12895 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(date): Weird behavior -d vs -f in some cases

U - date

Status: Open.

#12894 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(date): when using -f which a file contains "j" or "9j" or any miliatry time that ends with j, it rejected

U - date

Status: Open.

#12893 In uutils/coreutils;

· HackingRepo opened on Jun 15, 2026

bug(date) incorrectly converts %Y to the Thai Buddhist calendar when LC_TIME=th_TH.UTF-8 is set.

U - date

Status: Open.

#12891 In uutils/coreutils;

· compilersutra opened on Jun 15, 2026

bug(date): some valid dates like "@253402300739" and MEST prefix if before not after are rejected however the gnu one accepts them

U - date

Status: Open.

#12877 In uutils/coreutils;

· HackingRepo opened on Jun 14, 2026

minorbug(date): using "+%_::::z" produces different output across the two versions, gnu vs uu output

U - date

Status: Open.

#12876 In uutils/coreutils;

· HackingRepo opened on Jun 14, 2026