Advisories · Technology
kovidgoyal kitty.
Every CVE that names kovidgoyal kitty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences
- kovidgoyal kitty
- Command injection
- Other injection
- CVSS 7.3 High
Kitty vulnerable to command injection via unsanitized OSC 21 query reply
- kovidgoyal kitty
- Code injection
- CWE-150
- CVSS 7.6 High
Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging
- kovidgoyal kitty
- Path traversal
- CVSS 5.0 Medium
Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol
- kovidgoyal kitty
- Path traversal
- Race condition
- CVSS 7.8 High
@kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE
- kovidgoyal kitty
- Code injection
- Broken access control
- CVSS 7.4 High
Kitty has a shell command injection
- kovidgoyal kitty
- Command injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check
- kovidgoyal kitty
- Memory corruption
- CVSS 7.5 High
Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler
- kovidgoyal kitty
- Memory corruption