Skip to content
OpenAdvisories

Package · crates.io

rio-vt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.7
    RUSTSEC-2026-0430

    Path traversal in `rio-vt` Kitty graphics protocol handler allows out-of-bounds file delete (and read)

    The Kitty graphics protocol handler in `rio-vt` builds a filesystem path from an attacker-controlled APC escape sequence and, for the temp-file medium, only checks that the path *contains the substring* `"tty-graphics-protocol"` before it opens, reads, and `r…

    rio-vt crates.io