Approved changes feed: RSS · Atom

cpe:2.3:a:iterm2:iterm2:3.5.0:beta5:*:*:*:*:*:*

part: a version: 3.5.0 update: beta5

VendorIterm2 (9c18d200-29c6-5fa8-88d5-e3c0b3202c36)
ProductIterm2 (216a313c-4a92-58fb-8d26-d282c7181eea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gnachman/iterm2 purl2cpe 2026-06-01 10:15:28.986303

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46322 vulnerable 2026-06-08 06:12:44.701505 Details available
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alphanumeric. The hostname's other characters may be outside the set of alphanumeric characters, dash, and period.
Published: 2023-10-22T00:00:00.000Z
Updated: 2024-09-11T20:28:05.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46321 vulnerable 2026-06-08 06:12:44.697687 Details available
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line.
Published: 2023-10-22T00:00:00.000Z
Updated: 2024-09-11T20:35:41.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.