Security

Report a vulnerability

.github/SECURITY.md

Security Policy

Supported Versions

finit is a small project, as such we have no possibility to support older versions. The only supported version is the latest released on GitHub:

https://github.com/troglobit/finit/releases

Reporting a Vulnerability

Contact the project's main author and owner to report and discuss vulnerabilities.

Heap based buffer overwrite in urandom.so plugin
GHSA-fv6v-vw8h-9x79 published May 6, 2025 by troglobit

Moderate
Bundled getty can bypass /bin/login
GHSA-563g-p98j-mc9q published Apr 29, 2025 by troglobit

High

Learn more about advisories related to finit-project/finit in the GitHub Advisory Database