| Package | Affected versions | Patched versions |
|---|---|---|
| kitty | < 0.26.2 | 0.26.2 |
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free