vim-main vulnerabilities

CVEs whose affected-version data names the vim-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-43961High· 7.8

1mo ago

A flaw was found in Vim's netrw plugin

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be levera…

▾ Twilightvim · vimEPSS 0.16%via NVD