Nano (Gnu) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 246 known versions, newest CVE from 2026-04-22. Vendor: Gnu.

CVEs of Nano

• CVE-2026-6843 - CVSS 5.5 (medium), 2026-04-22: A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name…
• CVE-2026-25869 - CVSS 7.5 (high), 2026-02-11: MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input…
• CVE-2026-25868 - CVSS 6.1 (medium), 2026-02-11: MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the dir parameter. The application…
• CVE-2024-5742 - CVSS 6.7 (medium), 2024-06-12: A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file…
• CVE-2010-1161 - CVSS 3.7 (low), 2010-04-16: Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the…
• CVE-2010-1160 - CVSS 1.9 (low), 2010-04-16: GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted…