romkatv

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

romkatv records in CISA KEV

No romkatv vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-71988 CVE-2026-110102 · GHSA-hvg4-58mj-cjjc

Powerlevel10k gitstatus installer skips integrity checks

LOW 34

Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00121 Published 2026-10-13 No fix listed CWE-494

TI-2026-85178 CVE-2026-122137 · GHSA-pfwr-f3c5-mfgm

Insecure temporary directory in Powerlevel10k gitstatus installer

LOW 23

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00115 Published 2026-11-04 Fixed in 1.20.19 CWE-377

TI-2026-52867 CVE-2026-75483 · GHSA-gcjm-c673-v7vj

powerlevel10k Control Character Injection via package.json Version

LOW 21

powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00171 Published 2026-08-17 No fix listed CWE-150

TI-2026-85177 CVE-2026-122136 · GHSA-v68w-4wfv-crrh

Symlink following in Powerlevel10k instant prompt temporary file

LOW 18

Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.0012 Published 2026-11-04 Fixed in 1.20.19 CWE-59

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0