| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-121548 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Jarun nnn through 5.3 contains an OS command injection vulnerability i ... |
| CVE-2026-65612 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | nnn does not sanitize the filename variable. An attacker can place a f ... |
| CVE-2026-65611 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | nnn does not sanitize the path variable. An attacker can createa direc ... |
| CVE-2026-65610 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | nnn stores homelen variable as uchar_t, which can only represent value ... |
| CVE-2026-65609 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | nnn is vulnerable to Out-of-Bound write vulnerability.Due to lack of v ... |