ohmyzsh

Products

ProductCVEsExploitedLatest
ohmyzsh/ohmyzsh5–Nov 30, 2021
ohmyzsh1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-50187 High 8.8 Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files 0.5%
  • CVE-2021-3769 High 7.5 OS Command Injection in ohmyzsh/ohmyzsh 1.0%
  • CVE-2021-3727 High 7.5 OS Command Injection in ohmyzsh/ohmyzsh 1.0%
  • CVE-2021-3726 High 7.5 OS Command Injection in ohmyzsh/ohmyzsh 0.8%
  • CVE-2021-3725 High 7.5 OS Command Injection in ohmyzsh/ohmyzsh 1.1%
  • CVE-2021-3934 High 7.8 OS Command Injection in ohmyzsh/ohmyzsh 0.6%