Supply Chain and Malicious Code

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.CVE-2024-30205Gnu · CVSS 7.1 · 0.5% likely

   CWE-494

2. telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-…CVE-2026-28372GNU · CVSS 7.4 · 0.4% likely

   CWE-829

3. GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. Th…CVE-2026-96269GNU · CVSS 7.5 · 0.1% likely

   CWE-829

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.