gitstatus vulnerabilities

CVEs whose affected-version data names the gitstatus package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122137Medium· 6.7

3d ago

Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installer

Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gits…

▾ Sunlitromkatv · powerlevel10kEPSS 0.11%via CVEORG