skim vulnerabilities

1 known vulnerability in skim from Skim-rs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  skim: Improper Control of Generation of Code

  CVE-2026-41414Apr 24, 2026Skim-rs

  Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with access to SKIM_RS_BOT_PRIVATE_KEY and GITHUB_TOKEN (contents: