https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:10:32.446095+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-100867 fkie_cve-2026-100867 2026-09-28T07:10:32.476718+00:00

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof displayed text when victims enter the directory.

 https://db.gcve.eu/vuln/ghsa-wm7h-qp5m-qqh7 GHSA-wm7h-qp5m-qqh7 2026-09-28T07:10:32.477094+00:00

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof displayed text when victims enter the directory.