Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-122137

Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the extracted gitstatusd binary, which then executes with the victim's privileges.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Romkatv
Products
Gitstatus Powerlevel10k
CVE-2026-122136

Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File

Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. Attackers can pre-plant symlinks at p10k-instant-prompt-output-<user>-<pid> in TMPDIR, guessing the victim's shell PID, so shell startup truncates and overwrites targeted files.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Romkatv
Products
Powerlevel10k
CVE-2026-110102

powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can intercept the github.com mirror request and substitute a malicious archive, which runs as the gitstatusd daemon under the user's account on every prompt.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Romkatv
Products
Powerlevel10k
CVE-2026-75483

powerlevel10k Control Character Injection via package.json Version

powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render when the shell enters affected directories.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Romkatv
Products
Powerlevel10k