GHSA-f2wx-xjfw-xjv6
topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
GHSA-f2wx-xjfw-xjv6 is a vulnerability with no CVSS score yet in topgrade, published July 17, 2023. No source lists public exploit code. Fixed in topgrade 12.0.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
12.0.1topgrade +1 more
Description
Summary
https://github.com/advisories/GHSA-mc8h-8q98-g5hr https://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead
tempfile v0.4.26 ships with affected remove_dir_all v0.5.3 and so blocks my deployment of v12 to openSUSE distribution because it imposes a clean cargo audit
Updating tempfile is warranted
Affected packages
What each source reports
GitHub AdvisoriesNo score
topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
Summary
https://github.com/advisories/GHSA-mc8h-8q98-g5hr https://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead
tempfile v0.4.26 ships with affected remove_dir_all v0.5.3 and so blocks my deployment of v12 to openSUSE distribution because it imposes a clean cargo audit
Updating tempfile is warranted
- Record
GHSA-f2wx-xjfw-xjv6- Weakness
- CWE-367
- Updated
- 2026-11-02
OSVNo score
topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
Summary
https://github.com/advisories/GHSA-mc8h-8q98-g5hr https://github.com/XAMPPRocky/remove_dir_all/commit/7247a8b6ee59fc99bbb69ca6b3ca4bfd8c809ead
tempfile v0.4.26 ships with affected remove_dir_all v0.5.3 and so blocks my deployment of v12 to openSUSE distribution because it imposes a clean cargo audit
Updating tempfile is warranted
- Record
GHSA-f2wx-xjfw-xjv6- Weakness
- CWE-367
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/topgrade-rs/topgrade/security/advisories/GHSA-f2wx-xjfw-xjv6