kitty vulnerabilities

1 known vulnerability in kitty from Kovid Goyal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  kitty: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-95832Sep 25, 2026Kovid Goyal

  Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, beca