oh-my-posh vulnerabilities
1 known vulnerability in oh-my-posh from JanDeDobbeleer. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
oh-my-posh: Improper Control of Generation of Code
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so