agentprime: CWE-150

CVE-2026-121547: dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata

Tue, 03 Nov 2026 15:17:07 GMT

CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55467: CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)

Thu, 15 Oct 2026 17:08:24 GMT

CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81856: Terminal escape sequence injection in Hex via unneutralized server-supplied output

Mon, 12 Oct 2026 15:46:12 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Tue, 06 Oct 2026 15:32:53 GMT

openapi-python-client <0.29.1, fixed in 0.29.1. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-104026: Meta Platforms, Inc Sapling SCM: In Sapling SCM prior to v0.2.20260929-102736…

Fri, 02 Oct 2026 14:06:02 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103431: Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances

Thu, 01 Oct 2026 08:35:40 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

Tue, 29 Sep 2026 18:10:14 GMT

league/flysystem <3.35.3, fixed in 3.35.3. CVSS 3.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-100867: spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

Sun, 27 Sep 2026 13:09:52 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100866: onefetch through 2.28.1 Terminal Escape Sequence Injection

Sun, 27 Sep 2026 13:09:52 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

Wed, 23 Sep 2026 19:01:05 GMT

mesop <1.3.4, fixed in 1.3.4. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-90895: MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection

Mon, 14 Sep 2026 09:40:55 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90773: procs through 0.14.12 Terminal Escape Sequence Injection via Command

Sun, 13 Sep 2026 10:45:43 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

Tue, 08 Sep 2026 00:23:36 GMT

usage_rules >=0.1.18, <1.2.8, fixed in 1.2.8. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata

Mon, 07 Sep 2026 22:54:48 GMT

igniter >=0.8.1, <0.8.4, fixed in 0.8.4. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-19591: OpenAI Codex CLI: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…

Tue, 01 Sep 2026 17:06:45 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

pickem vulnerable to terminal escape-sequence injection via unsanitized item text

Tue, 25 Aug 2026 15:59:11 GMT

pickem <1.0.7, fixed in 1.0.7. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI

Thu, 20 Aug 2026 18:36:01 GMT

github.com/alexandre-daubois/ember <1.4.2, fixed in 1.4.2. CVSS 4.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-72847: broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View

Thu, 20 Aug 2026 17:19:34 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75483: powerlevel10k Control Character Injection via package.json Version

Mon, 17 Aug 2026 20:36:08 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73036: Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml

Tue, 11 Aug 2026 19:37:12 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72913: Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences

Mon, 10 Aug 2026 21:07:29 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73035: npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences

Mon, 10 Aug 2026 20:19:40 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-64654: GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

Thu, 06 Aug 2026 18:27:38 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Fri, 24 Jul 2026 22:35:52 GMT

github.com/jandedobbeleer/oh-my-posh <29.35.1, fixed in 29.35.1. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Shescape: Shell injection via unescaped parentheses on Windows with CMD

Fri, 24 Jul 2026 22:34:23 GMT

shescape <2.1.14 || >=3.0.0, <3.0.1, fixed in 2.1.14, 3.0.1. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-39879: SQL injection in syslog-ng SQL destionation driver

Mon, 20 Jul 2026 16:57:32 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62948: OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

Wed, 15 Jul 2026 17:50:43 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49147: App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes

Wed, 08 Jul 2026 14:55:50 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11373: Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections

Mon, 22 Jun 2026 11:28:06 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54057: Kitty vulnerable to command injection via unsanitized OSC 21 query reply

Fri, 12 Jun 2026 20:07:00 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50639: Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections

Wed, 10 Jun 2026 18:32:30 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50638: Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections

Wed, 10 Jun 2026 18:32:21 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50637: Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections

Wed, 10 Jun 2026 18:32:11 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11362: DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

Fri, 05 Jun 2026 14:50:12 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9270: DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

Fri, 05 Jun 2026 14:49:39 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46741: Etsy::StatsD versions through 1.002002 for Perl allow metric injections

Thu, 04 Jun 2026 15:54:48 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46739: Net::Statsd versions before 0.13 for Perl allow metric injections

Thu, 04 Jun 2026 15:45:23 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8722: Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

Wed, 03 Jun 2026 23:45:27 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46740: Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections

Tue, 26 May 2026 22:48:03 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

Tue, 19 May 2026 19:37:01 GMT

github.com/cli/cli >=1.6.0, <=1.14.0, no fixed version yet. CVSS 3.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-47090: Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks

Mon, 18 May 2026 19:31:33 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8788: Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Mon, 18 May 2026 06:34:24 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46720: Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

Sun, 17 May 2026 17:51:41 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46719: Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

Sat, 16 May 2026 13:37:22 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45038: Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution

Fri, 15 May 2026 16:48:12 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41526: KDE KCoreAddons: In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments…

Tue, 28 Apr 2026 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6019: BaseCookie.js_output() does not neutralize embedded characters

Wed, 22 Apr 2026 19:28:08 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Wed, 22 Apr 2026 18:50:32 GMT

github.com/inspektor-gadget/inspektor-gadget <0.49.1, fixed in 0.49.1. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40505: MuPDF < 1.27 mutool ANSI Injection via Metadata

Thu, 16 Apr 2026 01:20:08 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-26149: Microsoft Power Apps Desktop Client Spoofing Vulnerability

Tue, 14 Apr 2026 16:56:57 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.