Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2026-44463 — HIGH severity vulnerability | Release Alert

CVE-2026-44463

8.6

HIGHCVSS v3

Published

May 28, 2026

Affected

9 projects

Assigned by

GitHub

Severity scale

010

Description

Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g., PAGER) to execute arbitrary code. This vulnerability is fixed in 0.229.0.

NuGet GalleryZed is a library which contains general core application concepts

< 0.229.0NVD

Crates.ioA minimal, Redux-like state management library for Rust with advanced features.

< 0.229.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Thin wrapper for integrating ZeroMQ sockets into the Twisted reactore

< 0.229.0NVD

GitHubThin wrapper for integrating ZeroMQ sockets into the Twisted reactor

< 0.229.0NVD

RubyGemsZombie

< 0.229.0NVD

NPMlazily map functions to a lazy promise

< 0.229.0NVD

GitHub

< 0.229.0NVD

zed-industries/zed

GitHubCode at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

< 0.229.0NVD

ChocolateyOpen Source command-line client for managing SpiceDB clusters, built by AuthZed.

< 0.229.0NVD