4 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-44465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonit...
CVE-2026-44465
creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5all6z2l 2026-05-28 19:40:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrnb4ih62c 2026-06-02 21:37:06+00:00| seen|...
PT-2026-39598
Name of the Vulnerable Software and Affected Versions Zed versions prior to 0.229.0 Description The terminal tool permission system in the Zed code editor can be bypassed using bash variable expansion chaining $var@P. This allows for arbitrary command execution when an allowlisted command prefix ...
PT-2026-39599
Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior e.g., PAGER to execute arbitrary code. This vulnerability is fixed in 0.229.0...