kovidgoyal kitty

• CVE-2026-72913 High 7.3 Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences 0.2%
• CVE-2026-54057 High 7.3 Kitty vulnerable to command injection via unsanitized OSC 21 query reply 0.2%
• CVE-2026-54056 High 7.6 Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging 0.3%
• CVE-2026-54055 Medium 5.0 Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol <0.1%
• CVE-2026-42851 High 7.8 @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE 0.2%
• CVE-2026-42850 High 7.4 Kitty has a shell command injection 0.3%
• CVE-2026-33642 Critical 9.9 Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check 0.3%
• CVE-2026-33633 High 7.5 Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler 0.4%