nano

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-68422.9.1 – < 9.0Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissionsLOW 2.50.1 %
CVE-2024-5742Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-…MEDIUM 6.70.3 %