https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T16:39:13.041400+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110102 fkie_cve-2026-110102 2026-10-14T16:39:13.054229+00:00

Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can intercept the github.com mirror request and substitute a malicious archive, which runs as the gitstatusd daemon under the user's account on every prompt.

 https://db.gcve.eu/vuln/ghsa-hvg4-58mj-cjjc GHSA-hvg4-58mj-cjjc 2026-10-14T16:39:13.054366+00:00

Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can intercept the github.com mirror request and substitute a malicious archive, which runs as the gitstatusd daemon under the user's account on every prompt.