Advisories · Technology
Kovid Goyal kitty.
Every CVE that names Kovid Goyal kitty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.6 Medium
Missing ownership check on the shared memory object named by the kitty askpass escape code
- Kovid Goyal kitty
- Broken access control
- CVSS 4.6 Medium
Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer
- Kovid Goyal kitty
- Memory corruption
- CVSS 6.0 Medium
Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop
- Kovid Goyal kitty
- Broken access control
- CVSS 6.8 Medium
Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process
- Kovid Goyal kitty
- Memory corruption
- CVSS 4.6 Medium
Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory
- Kovid Goyal kitty
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell
- Kovid Goyal kitty
- Other injection