CVE-2022-47583

CRITICAL 9.8CVE-2022-47583 · Published 19/10/2023 · updated 17/06/2026

In short

CVE-2022-47583 is a CRITICAL (CVSS 9.8) vulnerability affecting mintty (mintty project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.
Fix: update to 3.6.3 or later.

Package	Affected versions	Patched versions
mintty mintty_project	`< 3.6.3`	`3.6.3`

Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.