WS-2026-0028

Vim before 9.2.1011 does not escape the bar character in tags file names returned by tagfiles. The C omni-completion script runtime/autoload/ccomplete.vim builds a :vimgrep command from those names and runs it via :execute, so a tags file path containing a bar can terminate the search pattern and...

Oracle Linux 10 : vim (ELSA-2026-38509)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38509 advisory. - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186671 CVE-2026-52858 vim: possible code execution with...