https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:57:53 +0000 https://vulnerability.circl.lu/vuln/cve-2020-35605 <p>The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message.</p> <p>The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message.</p> https://vulnerability.circl.lu/vuln/cve-2020-35605 https://vulnerability.circl.lu/vuln/usn-5659-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: kitty, Ubuntu:22.04:LTS: kitty</p> <p>Stephane Chauveau discovered that kitty incorrectly handled image filenames with special characters in error messages. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-35605)</p> <p>Carter Sande discovered that kitty incorrectly handled escape sequences in desktop notifications. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-41322)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: kitty, Ubuntu:22.04:LTS: kitty</p> <p>Stephane Chauveau discovered that kitty incorrectly handled image filenames with special characters in error messages. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-35605)</p> <p>Carter Sande discovered that kitty incorrectly handled escape sequences in desktop notifications. A remote attacker could possibly use this to execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-41322)</p> https://vulnerability.circl.lu/vuln/usn-5659-1