Kovid Goyal kitty

6 known vulnerabilities in Kovid Goyal kitty, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-95835 CVSS 5.6 medium Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running…
  • CVE-2026-95834 CVSS 4.6 medium Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the…
  • CVE-2026-80432 CVSS 6.0 medium Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing…
  • CVE-2026-80431 CVSS 6.8 medium Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to…
  • CVE-2026-80430 CVSS 4.6 medium Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before…
  • CVE-2026-95832 CVSS 9.3 critical Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty…