Known vulnerabilities in kitty

Software: kitty
Software CPE: cpe:2.3:a:sw.kovidgoyal.net:kitty:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting kitty kitty is affected by 12 known vulnerabilities: 6 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151625 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-915 High
No
No
0.49.0 22.09.2026 SB2026092261
#VU151624 - Missing Authorization
CWE-862 Low
No
No
0.49.0 22.09.2026 SB2026092261
#VU151623 - Heap-based Buffer Overflow
CVE-2026-33633
CWE-122 Medium
No
No
0.47.0 22.09.2026 SB2026092260
SB2026092262
SB2026103110
#VU151622 - Integer overflow
CVE-2026-33642
CWE-190 High
No
No
0.47.0 22.09.2026 SB2026092260
SB2026092262
SB2026103110
#VU151621 - Command injection
CVE-2026-42850
CWE-77 Medium
No
No
0.47.0 22.09.2026 SB2026092260
SB2026092263
SB20261001142
#VU151620 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42851
CWE-94 High
No
No
0.47.0 22.09.2026 SB2026092260
SB2026092263
SB20261001142
#VU151619 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-54055
CWE-59 Medium
No
No
0.47.2 22.09.2026 SB2026092259
SB2026092263
SB20261001142
#VU151618 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-54056
CWE-59 Low
No
No
0.47.2 22.09.2026 SB2026092259
#VU151617 - Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2026-54057
CWE-150 Medium
No
No
0.47.3 22.09.2026 SB2026092258
SB2026092263
SB20261001142
#VU140702 - Command injection
CVE-2026-72913
CWE-77 High
No
No
0.48.2 01.08.2026 SB2026080120
#VU67753 - Improper input validation
CVE-2022-41322
CWE-20 High
No
No
0.26.2 29.09.2022 SB2022092956
SB2022092959
SB2022100602
and 3 more
#VU49155 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-35605
CWE-78 High
No
No
0.19.3 21.12.2020 SB2020122807
SB2020122810
SB2022100602
and 1 more