diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-07-24 08:13:54 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-07-24 08:14:04 +0800 |
| commit | 0a8d88153752543cfd3afc3eff6e7aee49730b53 (patch) | |
| tree | 352b7f69057fd88689b520fa3d9eb977f9a0ac9c /runtime/syntax/python.vim | |
| parent | f95bd7393584e96152e1a2f68736c634ed8de614 (diff) | |
| download | rneovim-0a8d88153752543cfd3afc3eff6e7aee49730b53.tar.gz rneovim-0a8d88153752543cfd3afc3eff6e7aee49730b53.tar.bz2 rneovim-0a8d88153752543cfd3afc3eff6e7aee49730b53.zip | |
vim-patch:9.2.0839: [security]: arbitrary code execution via keyword lookup
Problem: [security]: arbitrary code execution via keyword lookup in
sh.vim, zsh.vim and ps1.vim filetype plugin
(manus-use)
Solution: For powershell, quote the commands using single quotes, for
sh/zsh pass the argument as a separate list item to term_start()/system()
(Yasuhiro Matsumoto).
Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2
https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e
Co-authored-by: Yasuhiro Matsumoto <mattn.jp@gmail.com>
Diffstat (limited to 'runtime/syntax/python.vim')
0 files changed, 0 insertions, 0 deletions