Debian/neovim: high 8.6
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_
Action: Upgrade neovim to 0.3.4-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.4-3 | - |
Fixed versions
| 0.3.4-3 |
Sources
- osv: DEBIAN-CVE-2019-12735#Debian:14/neovim
- https://security-tracker.debian.org/tracker/CVE-2019-12735
published · modified · JSON