neovim güvenlik açıkları (CVE)

neovim için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

6 sonuç
5.3Orta
CVE-2026-11487

Neovim View Branch secure.lua M.read command injection

Neovim

A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/secure.lua of the component View Branch. Executing a manipulation of the argument path can lead to command injection. It is possible to lau…

1.0%EPSS
6.6Orta
CVE-2026-45130

Vim: Heap Buffer Overflow in spell file loading

vim vim

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active. An attacker-controlled length field in the spe…

6.6Orta
CVE-2026-25749

Heap Overflow in Vim

vim vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in sr…

4.2Orta
CVE-2025-22134

heap-buffer-overflow with visual mode in Vim < 9.1.1003

vim vim

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.…