Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2026-44462 — MEDIUM severity vulnerability | Release Alert

CVE-2026-44462

6.4

MEDIUMCVSS v3

Published

May 28, 2026

Affected

9 projects

Assigned by

GitHub

Severity scale

010

Description

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowlisted command prefix. This vulnerability is fixed in 0.229.0.

NuGet GalleryZed is a library which contains general core application concepts

< 0.229.0NVD

Crates.ioA minimal, Redux-like state management library for Rust with advanced features.

< 0.229.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Thin wrapper for integrating ZeroMQ sockets into the Twisted reactore

< 0.229.0NVD

GitHubThin wrapper for integrating ZeroMQ sockets into the Twisted reactor

< 0.229.0NVD

RubyGemsZombie

< 0.229.0NVD

NPMlazily map functions to a lazy promise

< 0.229.0NVD

GitHub

< 0.229.0NVD

zed-industries/zed

GitHubCode at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

< 0.229.0NVD

ChocolateyOpen Source command-line client for managing SpiceDB clusters, built by AuthZed.

< 0.229.0NVD