Threats Tagged 'ghsa-fwjx-9p69-h25h'
View all threats tagged with 'ghsa-fwjx-9p69-h25h'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-fwjx-9p69-h25h'
Click on any threat for detailed analysis and mitigation recommendations
Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data 0 Oh My Posh versions prior to 29.35.1 allow terminal escape sequence injection via unsanitized prompt segment data. The software renders dynamic strings such as current directory names and Git commit metadata into the prompt without neutralizing raw terminal control characters. An attacker controlling these values can inject ANSI/OSC escape sequences that the victim's terminal executes on every prompt render. This can lead to clipboard hijacking, prompt spoofing, window-title manipulation, and terminal denial of service. The vulnerability arises because control characters are emitted verbatim in prompt segments without proper filtering. The issue affects local terminal rendering and requires the victim to render the prompt after changing directories or viewing Git data. No official patch or fix is currently confirmed. Join the discussion | GCVE Database | 07/24/2026, 22:35:52 UTC Added: 07/25/2026, 23:09:13 UTC |
Showing 1 to 1 of 1 result