CVE-2014-3219

CVE-2014-3219 affects fish before 2.1.1 and describes a local symlink attack that lets an attacker cause writes to arbitrary files via temporary paths (/tmp/fishd.log., /tmp/.pac-cache. , /tmp/.yum-cache., /tmp/.rpm-cache. ). The connected documents show openSUSE advisories and OSS notes referenc...

CVE-2023-49284

CVE-2023-49284 affects the fish shell (macOS, Linux, and related platforms). The vulnerability arises from Unicode non-characters used internally for marking wildcards and expansions, which can be read in command substitution output instead of being safely transformed. This can cause unexpected b...