Skip to content
OpenAdvisories

Product · o2sh

onefetch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-100866

    onefetch through 2.28.1 Terminal Escape Sequence Injection

    onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to m…

    o2sh onefetch