Filtered by vendor Dash Subscriptions
Filtered by product Dash Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-102473 2 Dash, Redhat 2 Dash, Rhel Els 2026-11-05 5.5 Medium
A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as *.*.*.*.*.tar.gz consume excessive CPU.
CVE-2009-0854 1 Dash 1 Dash 2026-04-23 N/A
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.