16 matches found
OPENSUSE-SU-2026:12085-1 onefetch-3.0.0-1.1 on GA media
These are all security issues fixed in the onefetch-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-100866
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
CVE-2026-100866
A flaw was found in onefetch. An attacker can manipulate terminal output by embedding control characters and escape sequences into project manifest fields, such as the project name or version. When a user runs onefetch in an untrusted repository, these unsanitized values are printed directly to t...
CVE-2026-100866
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
CVE-2026-100866
Versions of onefetch through 2.28.1 are vulnerable to terminal escape sequence injection . The root cause is that the application writes repository information field values to the terminal without removing control characters. Attackers can embed ANSI/OSC escape sequences in project manifest versi...
CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
EUVD-2026-87938
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
PT-2026-99536
Name of the Vulnerable Software and Affected Versions onefetch versions prior to 2.28.2 Description The software writes repository information field values to the terminal without removing control characters, which enables terminal escape sequence injection. Attackers can embed ANSI/OSC escape...
CVE-2026-100866: Improper Neutralization of Escape, Meta, or Control Sequences
onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...
[SECURITY] Fedora 42 Update: rust-onefetch-2.26.1-7.fc42
Command-line Git information tool...
[SECURITY] Fedora 43 Update: rust-onefetch-2.26.1-7.fc43
Command-line Git information tool...
Security update for onefetch (moderate)
openSUSE Security Update: Security update for onefetch Announcement ID: openSUSE-SU-2025:0356-1 Rating: moderate References: 1230085 1230686 Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE: 5.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products:...
onefetch-2.22.0-1.1 on GA media (moderate)
onefetch-2.22.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14353-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H...