[vim-security] Ex Command Execution via Cargo Quickfix Hooks in Vim < 9.2.1201
Vim before 9.2.1201 can run Ex commands through Cargo quickfix hooks, a medium command-injection flaw.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #editor
[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090
Vim sign_jump() before v9.2.1090 permits Ex command injection via unescaped buffer names; low-severity patch disclosed by Christian Brabandt.