Known vulnerabilities in kitty (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:kitty_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting kitty (Debian package) kitty (Debian package) is affected by 7 known vulnerabilities: 3 high, 4 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151623 - Heap-based Buffer Overflow
CVE-2026-33633
CWE-122 Medium
No
No
0.41.1-2+deb13u1 22.09.2026 SB2026092260
SB2026092262
SB2026103110
#VU151622 - Integer overflow
CVE-2026-33642
CWE-190 High
No
No
0.41.1-2+deb13u1 22.09.2026 SB2026092260
SB2026092262
SB2026103110
#VU151621 - Command injection
CVE-2026-42850
CWE-77 Medium
No
No
0.41.1-2+deb13u2 22.09.2026 SB2026092260
SB2026092263
SB20261001142
#VU151620 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42851
CWE-94 High
No
No
0.41.1-2+deb13u2 22.09.2026 SB2026092260
SB2026092263
SB20261001142
#VU151619 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-54055
CWE-59 Medium
No
No
0.41.1-2+deb13u2 22.09.2026 SB2026092259
SB2026092263
SB20261001142
#VU151617 - Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2026-54057
CWE-150 Medium
No
No
0.41.1-2+deb13u2 22.09.2026 SB2026092258
SB2026092263
SB20261001142
#VU49155 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-35605
CWE-78 High
No
No
0.13.3-1+deb10u1 21.12.2020 SB2020122807
SB2020122810
SB2022100602
and 1 more