Skip to content
OpenAdvisories

Vendor

spaceship-prompt

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.3

    spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

    spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal outp…