← Back

R Project

r_project

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
R
r
Cran
cran

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1R Project
1Cran
Nov 21, 2024
Jan 12, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command...Show more
The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. Update to version 4.0.3Show less
2Debian
R Project
2Debian Linux
R
May 13, 2026
Mar 10, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption...Show more
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.Show less