VYPR

gitstatus

by Romkatv

CVEs (1)

  • CVE-2026-122137MedNov 4, 2026
    risk 0.37cvss 6.7epss —

    Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. Local attackers can pre-create the predictable gitstatus-install.tmp directory to replace the…