01 Record

CVE-2026-73506

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

MediumPUBLISHEDCNA: GitHub_M

Base score6.1 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

02 Description

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Published: 2026-08-13 14:23Z1 DAY AGO
Last updated: 2026-08-14 15:37Z3 HR AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 6.1)
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Weaknesses: CWE-150
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: eeba97ee04c62d60d3e0d9c946f9299bc0919a56d373ad9be6aa430332da43ac

VendorProductVersionsPlatforms

JanDeDobbeleeroh-my-posh< 29.35.1—