| Package | Affected versions | Patched versions |
|---|---|---|
| neovim | ≥ 0.1.0, < 0.10.0 | 0.10.0 |
| vim | ≤ 9.0.0946 |
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free