Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

30 records

Vendor: kovidgoyal Clear all filters
TI-2026-63706 CVE-2026-95835 · GHSA-c73q-fvjv-39j2

Missing ownership check on the shared memory object named by the kitty askpass escape code

Priority LOW 24

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, b…

CVSS 4.0MEDIUM 5.6 Local Low privileges User interaction EPSS 0.001 Published 2026-09-25 Fixed in 0.49.0 CWE-862
TI-2026-63705 CVE-2026-95834 · GHSA-3v4f-mq3r-g3gv

Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer

Priority LOW 20

Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the terminal to read from and write to freed heap memory, because…

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00127 Published 2026-09-25 Fixed in 0.49.0 CWE-416
TI-2026-55509 CVE-2026-80432 · GHSA-ghc4-9m25-367h

Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop

Priority LOW 26

Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to obtain the contents of files dragged over the window even when…

CVSS 4.0MEDIUM 6.0 Local No auth User interaction EPSS 0.00121 Published 2026-09-25 Fixed in 0.49.0 CWE-862
TI-2026-55508 CVE-2026-80431 · GHSA-fx7r-q727-j825

Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Priority LOW 29

Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to the terminal to write past the end of a fixed-size buffer, because screen_handle_…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00134 Published 2026-09-25 Fixed in 0.49.0 CWE-787
TI-2026-55507 CVE-2026-80430 · GHSA-phg7-mgrc-j9pj

Link following in kovidgoyal kitty

Priority LOW 20

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at pat…

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00155 Published 2026-09-25 Fixed in 0.49.0 CWE-59
TI-2026-63703 CVE-2026-95832 · GHSA-hvwf-v5fx-xvj6

Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell

Priority MEDIUM 41

Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arb…

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.0016 Published 2026-09-25 Fixed in 0.49.0 CWE-74
TI-2026-31058 CVE-2026-42850

Kitty has a shell command injection

Priority LOW 34

Kitty is a cross-platform GPU based terminal.

CVSS 4.0HIGH 7.4 Network No auth User interaction EPSS 0.00287 Published 2026-06-12 Fixed in 0.47.0 CWE-77
TI-2026-25627 CVE-2026-33206

calibre has a path traversal vulnerability

Priority HIGH 69

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 4.0HIGH 8.2 Local No auth User interaction EPSS 0.00216 Published 2026-03-27 Fixed in 9.6.0 CWE-23
TI-2026-22163 CVE-2026-27810

calibre Vulnerable to HTTP Response Header Injection

Priority MEDIUM 62

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00242 Published 2026-02-27 Fixed in 9.4.0 CWE-113
Load more