Skip to content
OpenAdvisories

Vendor

romkatv

4 known vulnerabilities.

Products

powerlevel10k 4 gitstatus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-75483

    powerlevel10k Control Character Injection via package.json Version

    powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in the version string to emit arbitrary terminal control sequences on each prompt render wh…

    romkatv powerlevel10k