Vulnerability GHSA-wv33-5pxh-r7j7

Low Risk
LOW RISK
CVSS Score: 3.3
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
3 months ago
July 06, 2026 at 07:54 PM UTC
cut: -s (only-delimited) ignored when delimiter is a newline
0.0.1 - 0.6.0
0.0.1 - 0.6.0

Summary

cut: -s (only-delimited) ignored when delimiter is a newline

Details

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.

Impacted packages

Timeline

Published
3 months ago
July 06, 2026 at 07:54 PM UTC
Fixed (0.7.0)
7 months ago
March 09, 2026 at 09:10 PM UTC
Last Modified
3 months ago
July 06, 2026 at 08:11 PM UTC