https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:08:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334040 EUVD-2026-334040 https://cve.radiocsirt.org/vuln/euvd-2026-334040 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49147 <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.</p> <p>When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename.</p> <p>A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.</p> <p>When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename.</p> <p>A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49147 https://cve.radiocsirt.org/vuln/ghsa-p4vj-7pqg-xhr6 <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.</p> <p>When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename.</p> <p>A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.</p> <p>When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename.</p> <p>A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> https://cve.radiocsirt.org/vuln/ghsa-p4vj-7pqg-xhr6 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10965-1 <p>ack-3.10.0-1.1 on GA media</p> <p>ack-3.10.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10965-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49147 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ack, Ubuntu:20.04:LTS: ack, Ubuntu:22.04:LTS: ack, Ubuntu:24.04:LTS: ack, Ubuntu:25.10: ack, Ubuntu:26.04:LTS: ack</p> <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename. A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: ack, Ubuntu:20.04:LTS: ack, Ubuntu:22.04:LTS: ack, Ubuntu:24.04:LTS: ack, Ubuntu:25.10: ack, Ubuntu:26.04:LTS: ack</p> <p>App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a _safe_filename helper that sanitises the filenames printed by -f, -g, the colored match heading, and per-match lines, but the --show-types, -l/-L, and -c paths still emit the raw filename. A file whose name embeds cursor-movement or color escapes can overwrite or recolor earlier terminal output, or be passed unchanged to a downstream consumer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49147