Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: romkatv powerlevel10k 1.20.19 Clear all filters
TI-2026-85178 CVE-2026-122137 · GHSA-pfwr-f3c5-mfgm

Insecure temporary directory in Powerlevel10k gitstatus installer

Priority LOW 23

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00115 Published 2026-11-04 Fixed in 1.20.19 CWE-377
TI-2026-85177 CVE-2026-122136 · GHSA-v68w-4wfv-crrh

Symlink following in Powerlevel10k instant prompt temporary file

Priority LOW 18

Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.0012 Published 2026-11-04 Fixed in 1.20.19 CWE-59