Skip to content
OpenAdvisories

Vendor

romkatv

4 known vulnerabilities.

Products

powerlevel10k 4 gitstatus 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-122137

    Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer

    Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp dire…

    romkatv powerlevel10k gitstatus
  • Medium 4.4
    CVE-2026-122136

    Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File

    Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. Attackers can pre-plant symlinks at p10k-instant-prompt-output…

    romkatv powerlevel10k