security: malicious commands can exhaust resources of the host os #78

Activity

1. sylvestre commented on Sep 2, 2026

   

   sylvestre

   on Sep 2, 2026

   SponsorCollaborator

   More actions

   yeah, not a big deal IMHO :)
2. anastygnome commented on Sep 9, 2026

   

   anastygnome

   on Sep 9, 2026

   More actions

   Hi, @sylvestre and in general uutils mainteners

   we found that the playground have 2 flaws that lead to resource exhaustation, example https://uutils.org/playground/?cmd=seq%201%209999999999999999999 and https://uutils.org/playground/?cmd=truncate%20--size%2020G%20a can exhaust the host memory and killing the browser process via OOM as i confirmed via firefox

   the malicious commands is truncate --size 20G a and seq 1 9999999999999999999 they able kill the browser process entirely

   Are you implying we should prevent users from using commands and hold them by the hand ?
   You're supposed to know what you're doing on your machine and not to click on random links...