Skip to content
OpenAdvisories

Vendor

so-fancy

1 known vulnerabilities.

Products

diff-so-fancy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-50642

    Terminal Escape Injection in diff‑so‑fancy

    diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return (\r) and escape sequences (e.g., OSC, CS…

    so-fancy diff-so-fancy