#cwe-150

共收录 53 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布INFO

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains...

CVE-2026-49147

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output m

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes

CVE-2026-49147

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output m

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-06-22 发布INFO

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for the statsite protocol, which is a variant of statsd. Newli...

CVE-2026-11373

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, int...

CVE-2026-54057

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untruste...

CVE-2026-9270

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of da...

CVE-2026-11362

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not

历史摘要 · 未重新核验 · NVD

安全公告2026-05-19 发布INFO

GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

CVE-2026-45803

### Summary A security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence inject

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape...

CVE-2026-47090

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control character...

CVE-2026-47090

Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape control characters from file paths when dragging and dropping...

CVE-2026-45038

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence in...

CVE-2026-45803

`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified i

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that...

CVE-2026-41526

In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle me...

CVE-2026-41526

In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a

历史摘要 · 未重新核验 · NVD