Medium (5.3) in waycrate swhkd. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in Simple-Wayland-HotKey-Daemon 1.2.0.
SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device).
Severity
CVSS 3.1
5.3 medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
EPSS
0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)