diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-06-19 09:42:27 +0800 |
|---|---|---|
| committer | zeertzjq <zeertzjq@outlook.com> | 2026-06-19 09:43:55 +0800 |
| commit | 025a3e2baf18605dd319042457c31b64cc552c9c (patch) | |
| tree | 301f79b44ece5bcf7b958a7677ff65df3ff06f1c /test/functional/vimscript/executable_spec.lua | |
| parent | f5ad6763b67b327d24a4255aa41ea340f2f69173 (diff) | |
| download | rneovim-025a3e2baf18605dd319042457c31b64cc552c9c.tar.gz rneovim-025a3e2baf18605dd319042457c31b64cc552c9c.tar.bz2 rneovim-025a3e2baf18605dd319042457c31b64cc552c9c.zip | |
vim-patch:9.2.0479: [security]: runtime(tar): command injection in tar plugin
Problem: [security]: runtime(tar): command injection in tar plugin
(Christopher Lusk)
Solution: Use the correct shellescape(args, 1) form for a :! command
Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w
https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1
Co-authored-by: Christian Brabandt <cb@256bit.org>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions