Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-54057
7.8
HIGHCVSS v3
Published
June 12, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, into the shell's input without sanitization. Version 0.47.3 fixes the issue.
kovidgoyal/kitty
GitHubIf you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.
GitHubIf you live in the terminal, kitty is made for you! Cross-platform, fast, feature-rich, GPU based.< 0.47.3NVD