navi vulnerabilities

CVEs whose affected-version data names the navi package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101032High· 7.0

today

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitra…

▾ Twilightdenisidoro · navivia NVD