CVE-2026-50642 Terminal Escape Injection in diff‑so‑fancy

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return \r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attack...

CVE-2026-50642

CVE-2026-50642 — diff-so-fancy exposes non-SGR terminal control sequences in diff output, not sanitizing characters like CR and OSC/CSI. An attacker can place malicious control sequences in filenames, diff metadata, or file content, which render in the terminal during diff viewing and may cause o...

SUSE-SU-2026:23037-1 Security update for net-tools

This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

PT-2026-65776

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attacke...

SUSE SLES16 Security Update : net-tools (SUSE-SU-2026:22862-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22862-1 advisory. This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable...

SUSE SLES12 Security Update : net-tools (SUSE-SU-2026:3222-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3222-1 advisory. - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted the preceding description block directly from the...

openSUSE 16 Security Update : net-tools (openSUSE-SU-2026:21429-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21429-1 advisory. This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted...

GHSA-FWJX-9P69-H25H Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Summary Oh My Posh renders dynamic, potentially attacker-controlled strings the current directory name, Git commit metadata, environment variable values, command output into the prompt without neutralizing raw terminal control characters. An attacker who controls one of these values can inject...

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Summary Oh My Posh renders dynamic, potentially attacker-controlled strings the current directory name, Git commit metadata, environment variable values, command output into the prompt without neutralizing raw terminal control characters. An attacker who controls one of these values can inject...

Security update for net-tools (low)

openSUSE security update: security update for net-tools ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21429-1 Rating: low References: bsc1254323 Cross-References: CVE-2024-58251 CVSS scores: CVE-2024-58251 SUSE : 2.8...

Security update for net-tools

This update for net-tools fixes the following issues: CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2026:3223-1 Security update for net-tools

This update for net-tools fixes the following issues: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

Security update for net-tools

This update for net-tools fixes the following issues: CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2026:22936-1 Security update for net-tools

This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

OPENSUSE-SU-2026:21429-1 Security update for net-tools

This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323...

SUSE SLES12 Security Update : iproute2 (SUSE-SU-2026:3150-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3150-1 advisory. This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences bsc1254324. Tenable has extracted...

Security update for iproute2

This update for iproute2 fixes the following issue CVE-2024-58251: denial of service via terminal escape sequences bsc1254324. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2026:3150-1 Security update for iproute2

This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences bsc1254324...

Linux Distros Unpatched Vulnerability : CVE-2026-49147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose...

PYSEC-2026-2480 Flawfinder output manipulation via untrusted filenames and source text

Impact This vulnerability is an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection: Terminal Output Spoofing: A malicious file whose name contains ANSI escape sequences can end up being included in flawfinder...