Secur0 CNA

Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

Missing ownership check on the shared memory object named by the kitty askpass escape code

Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer

Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell

Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing authorization in the kitty drag and drop protocol allows a client to obtain dragged file contents without a drop

Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory

Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII

CSRF in Prospero Flow CRM order confirmation allows unauthorized order state changes