spaceship-prompt vulnerabilities

CVEs whose affected-version data names the spaceship-prompt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-100867Low· 3.3

today

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt

spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to ma…

▾ Sunlitspaceship-prompt · spaceship-promptvia NVD