Re: Help wanted evaluating claimed security vulnerability in groff

Sebastien Peterson-Boudreau <[email protected]> Tue, 26 May 2026 01:31:44 -0300
Newsgroups gmane.comp.printing.groff.general
Message-ID <CAGPRubSmD0gje3CLzPmAy_Sd-97GwjjG4-4LauBi62v9y_iZvw@mail.gmail.com>
Maybe I'm doing something wrong but I'm not even able to reproduce the
example Proof of Concept. The code in question does look a bit fishy
for command injection, but without a working example, my knowledge of
the inner-workings of groff is too limited to assess the plausibility.

fwiw, the writeup does _reek_ of that overconfident, doomsaying, LLM tone...