| Package | Affected versions | Patched versions |
|---|---|---|
| xterm | < 375 | 375 |
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free