Files
vim-mirror/runtime/doc
Christian Brabandt 7ab76a8604 patch 9.2.0316: [security]: command injection in netbeans interface via defineAnnoType
Problem:  [security]: The netbeans defineAnnoType command passes typeName, fg and bg
          unsanitized to coloncmd(), allowing a malicious server to inject
          arbitrary Ex commands via '|'. Similarly, specialKeys does not
          validate key tokens before building a map command.
Solution: Validate typeName, fg and bg against an allowlist of safe
          characters before passing them to coloncmd()

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6

Supported by AI

Signed-off-by: Christian Brabandt <cb@256bit.org>
2026-04-07 18:42:18 +00:00
..
2026-02-14 15:19:10 +00:00
2026-03-31 15:20:08 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2025-08-10 10:28:16 +02:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2026-02-14 15:19:10 +00:00
2025-10-07 19:19:43 +00:00
2026-02-14 15:19:10 +00:00