navi vulnerabilities

1 known vulnerability in navi from Denisidoro. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  navi: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-101032Sep 27, 2026Denisidoro

  navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim