Jarun

6 CVEs in 2 Jarun products, including Nnn, Buku. Newest: CVE-2026-123201 (2026-11-05). Severity, EPSS and public exploits for each.

Jarun products with known CVEs

ProductCVEs
Nnn4
Buku2
Jarun CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123201Medium5.32026-11-05Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request i…
CVE-2026-121627Medium6.12026-11-03buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unes…
CVE-2026-121550Low3.32026-11-03nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO pat…
CVE-2026-121549Medium4.42026-11-03nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting…
CVE-2026-121548High7.82026-11-03Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attack…
CVE-2025-13566Low3.32025-11-23A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of th…