Vulnerabilities (CVE)

Filtered by vendor Planetargon Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3934 1 Planetargon 1 Oh My Zsh 2021-12-08 5.1 MEDIUM 7.5 HIGH
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command
CVE-2021-3725 1 Planetargon 1 Oh My Zsh 2021-11-30 6.8 MEDIUM 8.8 HIGH
Vulnerability in dirhistory plugin Description: the widgets that go back and forward in the directory history, triggered by pressing Alt-Left and Alt-Right, use functions that unsafely execute eval on directory names. If you cd into a directory with a carefully-crafted name, then press Alt-Left, the system is subject to command injection. Impacted areas: - Functions pop_past and pop_future in dirhistory plugin.