{"id":"CVE-2021-31153","aliases":["GHSA-f3fg-5j9p-vchc","RUSTSEC-2021-0104"],"url":"https://o3.security/vulnerability/CVE-2021-31153","summary":"File exposure in pleaser","details":"please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.","published":"2021-05-27T13:15:08.107Z","modified":"2026-03-14T10:55:37.215945Z","cvss":{"score":3.3,"severity":"LOW","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"pleaser","fixedVersion":"0.4.0"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://gitlab.com/edneville/please/-/tree/master/src/bin"},{"type":"EVIDENCE","url":"http://www.openwall.com/lists/oss-security/2021/05/18/1"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-03-14T10:55:37.215945Z"}}