Skip to content
OpenAdvisories

Vendor

o2sh

1 known vulnerabilities.

Products

onefetch 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-100866

    onefetch through 2.28.1 Terminal Escape Sequence Injection

    onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to m…

    o2sh onefetch