croc vulnerabilities

CVEs whose affected-version data names the croc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119298Medium· 4.2

1w ago

croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats any sender-controlled basename beginning with croc-stdin- as…

▾ Sunlitschollz · crocEPSS 0.30%via CVEORG