agentprime: kovid-goyal-kittyEvery new CVE for kovid-goyal-kitty.https://agentprime.io/CVE-2026-95835: Missing ownership check on the shared memory object named by the kitty askpass escape codehttps://agentprime.io/advisories/CVE-2026-95835/https://agentprime.io/advisories/CVE-2026-95835/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:33:30 GMTCVECVE-2026-95834: Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transferhttps://agentprime.io/advisories/CVE-2026-95834/https://agentprime.io/advisories/CVE-2026-95834/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:28:09 GMTCVECVE-2026-80432: Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drophttps://agentprime.io/advisories/CVE-2026-80432/https://agentprime.io/advisories/CVE-2026-80432/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 16:22:09 GMTCVECVE-2026-80431: Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal processhttps://agentprime.io/advisories/CVE-2026-80431/https://agentprime.io/advisories/CVE-2026-80431/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 13:23:51 GMTCVECVE-2026-80430: Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directoryhttps://agentprime.io/advisories/CVE-2026-80430/https://agentprime.io/advisories/CVE-2026-80430/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 13:08:13 GMTCVECVE-2026-95832: Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shellhttps://agentprime.io/advisories/CVE-2026-95832/https://agentprime.io/advisories/CVE-2026-95832/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 12:54:25 GMTCVEcritical