Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities found for procs by dalance
CVE-2026-90773 (GCVE-0-2026-90773)
Vulnerability from nvd – Published: 2026-09-13 10:45 – Updated: 2026-09-13 10:45
VLAI
EPSS
VEX
Title
procs through 0.14.12 Terminal Escape Sequence Injection via Command
Summary
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.
Severity
CWE
- CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/dalance/procs/issues/950 | issue-tracking |
| https://github.com/dalance/procs | product |
| https://github.com/dalance/procs/blob/v0.14.12/sr… | technical-description |
| https://github.com/dalance/procs/commit/a064cec7d… | patch |
| https://www.vulncheck.com/advisories/procs-throug… | third-party-advisory |
Date Public
2026-08-06 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/procs",
"product": "procs",
"vendor": "dalance",
"versions": [
{
"lessThanOrEqual": "0.14.12",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-08-06T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users\u0027 terminals for interpretation by terminal emulators."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.2,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-150",
"description": "Improper Neutralization of Escape, Meta, or Control Sequences",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T10:45:43.955Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #950",
"tags": [
"issue-tracking"
],
"url": "https://github.com/dalance/procs/issues/950"
},
{
"tags": [
"product"
],
"url": "https://github.com/dalance/procs"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/dalance/procs/blob/v0.14.12/src/columns/command.rs"
},
{
"tags": [
"patch"
],
"url": "https://github.com/dalance/procs/commit/a064cec7d59f69a636d38e247824245dcd3a9836"
},
{
"name": "VulnCheck Advisory: procs through 0.14.12 Terminal Escape Sequence Injection via Command",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/procs-through-0.14.12-terminal-escape-sequence-injection-via-command"
}
],
"title": "procs through 0.14.12 Terminal Escape Sequence Injection via Command",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-90773",
"datePublished": "2026-09-13T10:45:43.955Z",
"dateReserved": "2026-09-13T10:14:58.418Z",
"dateUpdated": "2026-09-13T10:45:43.955Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90773 (GCVE-0-2026-90773)
Vulnerability from cvelistv5 – Published: 2026-09-13 10:45 – Updated: 2026-09-13 10:45
VLAI
EPSS
VEX
Title
procs through 0.14.12 Terminal Escape Sequence Injection via Command
Summary
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.
Severity
CWE
- CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/dalance/procs/issues/950 | issue-tracking |
| https://github.com/dalance/procs | product |
| https://github.com/dalance/procs/blob/v0.14.12/sr… | technical-description |
| https://github.com/dalance/procs/commit/a064cec7d… | patch |
| https://www.vulncheck.com/advisories/procs-throug… | third-party-advisory |
Date Public
2026-08-06 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:cargo/procs",
"product": "procs",
"vendor": "dalance",
"versions": [
{
"lessThanOrEqual": "0.14.12",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "George Chen"
}
],
"datePublic": "2026-08-06T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users\u0027 terminals for interpretation by terminal emulators."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.2,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-150",
"description": "Improper Neutralization of Escape, Meta, or Control Sequences",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-13T10:45:43.955Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #950",
"tags": [
"issue-tracking"
],
"url": "https://github.com/dalance/procs/issues/950"
},
{
"tags": [
"product"
],
"url": "https://github.com/dalance/procs"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/dalance/procs/blob/v0.14.12/src/columns/command.rs"
},
{
"tags": [
"patch"
],
"url": "https://github.com/dalance/procs/commit/a064cec7d59f69a636d38e247824245dcd3a9836"
},
{
"name": "VulnCheck Advisory: procs through 0.14.12 Terminal Escape Sequence Injection via Command",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/procs-through-0.14.12-terminal-escape-sequence-injection-via-command"
}
],
"title": "procs through 0.14.12 Terminal Escape Sequence Injection via Command",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-90773",
"datePublished": "2026-09-13T10:45:43.955Z",
"dateReserved": "2026-09-13T10:14:58.418Z",
"dateUpdated": "2026-09-13T10:45:43.955Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}