Fedora 43 : rust-onefetch (2026-e308adcdf4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e308adcdf4 advisory. Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 44 : rust-onefetch (2026-9939b56d4e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9939b56d4e advisory. Rebuilt with faster-hex 0.10.1 for RUSTSEC-2026-0306 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 46 : rust-onefetch / rust-onefetch-ascii / rust-onefetch-image / etc (2026-85e3705d0b)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-85e3705d0b advisory. https://github.com/o2sh/onefetch/releases/tag/3.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

onefetch-3.0.0-1.1 on GA media (moderate)

onefetch-3.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12085-1 Rating: moderate Cross-References: CVE-2026-100866 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the onefetch-3.0.0-1...

Fedora 43 : rust-onefetch (2026-c71291fcdf)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c71291fcdf advisory. Backport fix for CVE-2026-100866 from 3.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 44 : rust-onefetch (2026-2770759ef0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2770759ef0 advisory. Backport fix for CVE-2026-100866 from 3.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

OPENSUSE-SU-2026:12085-1 onefetch-3.0.0-1.1 on GA media

These are all security issues fixed in the onefetch-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

CVE-2026-100866

A flaw was found in onefetch. An attacker can manipulate terminal output by embedding control characters and escape sequences into project manifest fields, such as the project name or version. When a user runs onefetch in an untrusted repository, these unsanitized values are printed directly to t...

CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

EUVD-2026-87938

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

CVE-2026-100866

Versions of onefetch through 2.28.1 are vulnerable to terminal escape sequence injection . The root cause is that the application writes repository information field values to the terminal without removing control characters. Attackers can embed ANSI/OSC escape sequences in project manifest versi...

CVE-2026-100866 onefetch through 2.28.1 Terminal Escape Sequence Injection

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

CVE-2026-100866: Improper Neutralization of Escape, Meta, or Control Sequences

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

PT-2026-99536

Name of the Vulnerable Software and Affected Versions onefetch versions prior to 2.28.2 Description The software writes repository information field values to the terminal without removing control characters, which enables terminal escape sequence injection. Attackers can embed ANSI/OSC escape...

[SECURITY] Fedora 42 Update: rust-onefetch-2.26.1-7.fc42

Command-line Git information tool...

[SECURITY] Fedora 43 Update: rust-onefetch-2.26.1-7.fc43

Command-line Git information tool...

Security update for onefetch (moderate)

openSUSE Security Update: Security update for onefetch Announcement ID: openSUSE-SU-2025:0356-1 Rating: moderate References: 1230085 1230686 Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE: 5.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products:...