Threats affecting pkg:github/romkatv/powerlevel10k

Powerlevel10k versions before 1.20.19 have a symlink following vulnerability in the _p9k_dump_instant_prompt function. This flaw allows local attackers to overwrite files writable by the victim by pre-planting symbolic links in a predictable temporary file path based on the victim's shell PID. The vulnerability is fixed in version 1.20.19.