Simple-Wayland-HotKey-Daemon (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package Simple-Wayland-HotKey-Daemon, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2022-27818 — CVSS 9.1 (critical): SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.
• CVE-2022-27815 — CVSS 7.8 (high): SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service.
• CVE-2022-27816 — CVSS 7.1 (high): SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.
• CVE-2022-27819 — CVSS 5.3 (medium): SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory…
• CVE-2022-27817 — CVSS 4.4 (medium): SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of…
• CVE-2022-27814 — CVSS 3.3 (low): SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.