Skip to content
Jjarun
Products
| Product | CVEs | Exploited | Latest |
|---|
| nnn | 4 | – | Nov 3, 2026 |
| buku | 2 | – | Nov 5, 2026 |
Exploited and recent CVEs
-
CVE-2026-123201
Medium 5.3
buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API
0.4%
-
CVE-2026-121627
Medium 6.1
buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL
0.2%
-
CVE-2026-121550
Low 3.3
nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling
0.1%
-
CVE-2026-121549
Medium 4.4
nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins
0.1%
-
CVE-2026-121548
High 7.8
nnn through 5.3 OS Command Injection via togglex Plugin
1.2%
-
CVE-2025-13566
Low 3.3
jarun nnn nnn.c run_cmd_as_plugin double free
0.1%