Approved changes feed: RSS · Atom
cpe:2.3:a:swiftterm_project:swiftterm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Swiftterm Project (f6cf5c37-fbd5-5597-a71a-b89c31d3ea22) |
|---|---|
| Product | Swiftterm (c1a7f372-9371-52a5-91a6-4a294ed255af) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/migueldeicaza/swiftterm |
purl2cpe | 2026-06-01 10:12:34.040334 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23465 |
vulnerable | 2026-06-08 05:40:57.585764 |
SwiftTerm vulnerable to arbitrary command execution
HIGH (7.1)
SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commit a94e6b24d24ce9680ad79884992e1dff8e150a31, an attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Version a94e6b24d24ce9680ad79884992e1dff8e150a31 contains a patch for this issue. There are no known workarounds available.
Published: 2022-12-02T22:53:45.174Z
Updated: 2025-04-23T16:32:50.729Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.