rpm package
almalinux/xxd
pkg:rpm/almalinux/xxd
Vulnerabilities (18)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-59858 | Hig | 7.8 | < 2:9.1.083-9.el10_2.12 | 2:9.1.083-9.el10_2.12 | Jul 9, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Becau | |
| CVE-2026-59856 | Hig | 7.8 | < 2:9.1.083-9.el10_2.12 | 2:9.1.083-9.el10_2.12 | Jul 9, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without e | |
| CVE-2026-57456 | Hig | 7.8 | < 2:9.1.083-9.el10_2.12 | 2:9.1.083-9.el10_2.12 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populatin | |
| CVE-2026-57455 | Hig | 7.8 | < 2:9.1.083-9.el10_2.12 | 2:9.1.083-9.el10_2.12 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri | |
| CVE-2026-55693 | Hig | 7.8 | < 2:9.1.083-9.el10_2.12 | 2:9.1.083-9.el10_2.12 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself | |
| CVE-2026-52858 | Hig | 7.8 | < 2:9.1.083-9.el10_2.7 | 2:9.1.083-9.el10_2.7 | Jun 11, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and f | |
| CVE-2026-47167 | Med | 5.3 | < 2:9.1.083-9.el10_2.7 | 2:9.1.083-9.el10_2.7 | Jun 11, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-definition patterns read from .rb files under | |
| CVE-2026-47162 | Hig | 8.8 | < 2:9.1.083-9.el10_2.7 | 2:9.1.083-9.el10_2.7 | Jun 11, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~ | |
| CVE-2026-46483 | Low | 3.6 | < 2:9.1.083-9.el10_2.7 | 2:9.1.083-9.el10_2.7 | May 15, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape( | |
| CVE-2026-41411 | Med | 6.6 | < 2:9.1.083-9.el10_2.4 | 2:9.1.083-9.el10_2.4 | Apr 24, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcar | |
| CVE-2026-35177 | Med | 4.1 | < 2:9.1.083-9.el10_2.3 | 2:9.1.083-9.el10_2.3 | Apr 6, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in | |
| CVE-2026-34982 | Hig | 8.2 | < 2:9.1.083-9.el10_2.2 | 2:9.1.083-9.el10_2.2 | Apr 6, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a | |
| CVE-2026-33412 | Med | 5.6 | < 2:9.1.083-6.el10_1.3 | 2:9.1.083-6.el10_1.3 | Mar 24, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary sh | |
| CVE-2026-28421 | Med | 5.3 | < 2:9.1.083-6.el10_1.3 | 2:9.1.083-6.el10_1.3 | Feb 27, 2026 | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2. | |
| CVE-2026-28417 | Med | 4.4 | < 2:9.1.083-6.el10_1.3 | 2:9.1.083-6.el10_1.3 | Feb 27, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute | |
| CVE-2026-25749 | Med | 6.6 | < 2:9.1.083-6.el10_1.1 | 2:9.1.083-6.el10_1.1 | Feb 6, 2026 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When process | |
| CVE-2025-53906 | Med | 4.1 | < 2:9.1.083-6.el10_1 | 2:9.1.083-6.el10_1 | Jul 15, 2025 | Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. Ho | |
| CVE-2025-53905 | Med | 4.1 | < 2:9.1.083-6.el10_1 | 2:9.1.083-6.el10_1 | Jul 15, 2025 | Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. Ho |
- affected < 2:9.1.083-9.el10_2.12fixed 2:9.1.083-9.el10_2.12
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Becau
- affected < 2:9.1.083-9.el10_2.12fixed 2:9.1.083-9.el10_2.12
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without e
- affected < 2:9.1.083-9.el10_2.12fixed 2:9.1.083-9.el10_2.12
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populatin
- affected < 2:9.1.083-9.el10_2.12fixed 2:9.1.083-9.el10_2.12
Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri
- affected < 2:9.1.083-9.el10_2.12fixed 2:9.1.083-9.el10_2.12
Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself
- affected < 2:9.1.083-9.el10_2.7fixed 2:9.1.083-9.el10_2.7
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and f
- affected < 2:9.1.083-9.el10_2.7fixed 2:9.1.083-9.el10_2.7
Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-definition patterns read from .rb files under
- affected < 2:9.1.083-9.el10_2.7fixed 2:9.1.083-9.el10_2.7
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~
- affected < 2:9.1.083-9.el10_2.7fixed 2:9.1.083-9.el10_2.7
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(
- affected < 2:9.1.083-9.el10_2.4fixed 2:9.1.083-9.el10_2.4
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcar
- affected < 2:9.1.083-9.el10_2.3fixed 2:9.1.083-9.el10_2.3
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in
- affected < 2:9.1.083-9.el10_2.2fixed 2:9.1.083-9.el10_2.2
Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a
- affected < 2:9.1.083-6.el10_1.3fixed 2:9.1.083-6.el10_1.3
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary sh
- affected < 2:9.1.083-6.el10_1.3fixed 2:9.1.083-6.el10_1.3
Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.
- affected < 2:9.1.083-6.el10_1.3fixed 2:9.1.083-6.el10_1.3
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute
- affected < 2:9.1.083-6.el10_1.1fixed 2:9.1.083-6.el10_1.1
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When process
- affected < 2:9.1.083-6.el10_1fixed 2:9.1.083-6.el10_1
Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. Ho
- affected < 2:9.1.083-6.el10_1fixed 2:9.1.083-6.el10_1
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. Ho