GHSA-fq3w-p4fg-mw73Low▾ Sunlitfixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8`
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Affects: Anyone who generates the UNIX man pages in Fuji <= 0.8.0 build with the dev crate feature.
Consequences: /usr/share/man/man8 may be entirely removed & re-created without any of the previous entries.
At the time of writing, no new version has been released on crates.io, due to an unrelated CI/CD publishing issue. Due to the same unrelated publishing issue, no new GitHub Releases version has been released.
Do not run fuji manual on non-dev builds for versions <= 0.8.0.
This bug results from development-only code being accidentally left in for release use.
Previous versions of Fuji are still "safe" to use, provided that you do not run fuji manual.
There is no malicious potential from this, it's just a major annoyance to accidentally remove all your sysadmin man pages.
fixurjavainstall <= 0.8.0Upgrade to a patched release:
fixurjavainstall 0.8.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115727High· 8.1AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
CVE-2026-15575Medium· 5.3Active debug code vulnerability in SFM Software Technologies Inc
CVE-2025-42872Medium· 6.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session…
CVE-2026-83550High· 7.1A flaw was found in postgres-exporter
CVE-2026-100102Critical· 9.5Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface
CVE-2026-102628Critical· 9.3The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment