zeertzjq f9186e0c0e vim-patch:9.2.1011: [security]: arbitrary Ex command execution during C omni-completion (#41501) ...

Problem:  arbitrary Ex command execution during C omni-completion via
          tag file names (Yazan Balawneh)
Solution: Escape the | for all returned tag files

Github Security Advisory:
https://github.com/vim/vim/security/advisories/GHSA-r77m-8m55-rpr6

331d5d6702

Co-authored-by: Christian Brabandt <cb@256bit.org>

2026-08-26 07:53:04 +00:00

..

cargo

vim-patch:fc93594d562d

2023-09-13 17:23:45 +02:00

dist

vim-patch:9.1.2078: A few more typos in various files (#37368)

2026-01-12 01:27:03 +00:00

provider

feat(provider): support bun as node.js provider #38517

2026-04-12 15:01:32 -04:00

remote

refactor: rewrite python provider in lua

2024-01-22 22:36:40 +01:00

rust

vim-patch:fc93594d562d

2023-09-13 17:23:45 +02:00

xml

re-integrate runtime/ vim-patch:0 #938

2014-07-29 02:12:31 +00:00

ada.vim

vim-patch:3fa4da4: runtime: add missing fnameescape()/shellescape() in a few runtime files (#40486)

2026-06-30 06:58:18 +08:00

adacomplete.vim

vim-patch:6c391a74fe90 (#15654)

2021-09-13 16:33:41 +02:00

beancount.vim

vim-patch:1fee3cd: runtime(beancount): Include Beancount runtime files

2026-06-14 09:37:00 +08:00

beancountcomplete.vim

vim-patch:1fee3cd: runtime(beancount): Include Beancount runtime files

2026-06-14 09:37:00 +08:00

bitbake.vim

vim-patch:b529cfbd04c0 (#19501)

2022-07-26 11:26:23 +02:00

cargo.vim

vim-patch:fc93594d562d

2023-09-13 17:23:45 +02:00

ccomplete.vim

vim-patch:9.2.1011: [security]: arbitrary Ex command execution during C omni-completion (#41501)

2026-08-26 07:53:04 +00:00

clojurecomplete.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

context.vim

vim-patch:9.2.0523: tests: no test for using shellescape() in combination with :! (#39972)

2026-05-24 09:29:50 +08:00

contextcomplete.vim

vim-patch:46fceaaa8d14

2017-04-29 01:47:36 +02:00

csscomplete.vim

vim-patch:34cc7d8c034f #15753

2021-09-22 06:12:06 -07:00

decada.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

freebasic.vim

vim-patch:0d878b95d8f9 (#19197)

2022-07-02 11:06:03 +02:00

gnat.vim

vim-patch:57352b2: runtime: mention subscription only ml, fix typo in maintainer email (#37222)

2026-01-03 23:27:49 +00:00

gzip.vim

vim-patch:ab02d65: runtime(gzip): Remove compatibility fall-backs, harden random filename generation (#39165)

2026-04-18 06:39:54 +08:00

hare.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

haskellcomplete.vim

vim-patch:61044eb: runtime(haskellcomplete): fix Undefined variable b:completingLangExtension. (#37712)

2026-02-05 01:32:40 +00:00

hcl.vim

vim-patch:c8b7e61: runtime: Add license information for HCL and Terraform runtime files

2025-05-26 17:51:24 +02:00

htmlcomplete.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

htmlfold.vim

vim-patch:dc7ed8f: runtime(html): Optionally fold tags with the "expr" method

2025-05-11 10:47:39 +02:00

javaformat.vim

vim-patch:85f054a: runtime(java): Recognise the CommonMark form (///) of Javadoc comments

2024-10-01 07:33:24 +02:00

javascriptcomplete.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

modula2.vim

vim-patch:9.1.0013: Modula2 filetype support lacking (#27020)

2024-01-16 17:45:57 +00:00

msgpack.vim

refactor(typval)!: remove distinction of binary and nonbinary strings

2024-06-27 11:04:04 +02:00

paste.vim

fix(runtime): clean up one-off scripts

2024-10-15 20:50:21 +02:00

phpcomplete.vim

vim-patch:dbf749bd5aae (#25665)

2023-10-16 16:36:25 +08:00

provider.vim

Add overlapped option to jobstart

2020-06-10 22:21:14 +09:00

python3complete.vim

vim-patch:9.2.0699: [security]: possible code execution with python complete (#40363)

2026-06-22 02:26:37 +00:00

python.vim

vim-patch:f88e719: runtime(python): Fix indenting for brackets within python byte strings

2026-07-27 06:31:40 +08:00

pythoncomplete.vim

vim-patch:9.2.0699: [security]: possible code execution with python complete (#40363)

2026-06-22 02:26:37 +00:00

RstFold.vim

vim-patch:4c05fa08c973

2019-07-29 20:50:07 +02:00

rubycomplete.vim

vim-patch:d08059ab48b8

2024-01-02 11:43:18 +01:00

rust.vim

vim-patch:1294861: runtime(getscript,vimball,rust): Use correct shellescape() form for ! ex cmd

2026-05-21 08:07:01 +08:00

rustfmt.vim

vim-patch:068c060: runtime(rustfmt): not correctly escaping directory names (#38597)

2026-03-30 19:32:55 +08:00

shada.vim

refactor(typval)!: remove distinction of binary and nonbinary strings

2024-06-27 11:04:04 +02:00

spotbugs.vim

vim-patch:9.1.0935: SpotBugs compiler can be improved

2025-02-04 06:45:25 +08:00

sqlcomplete.vim

vim-patch:b74ec15: runtime(sqlcomplete): only set 'omnifunc' if dbext plugin was loaded (#36527)

2025-11-12 00:21:31 +00:00

syntaxcomplete.vim

vim-patch:4c295027a426

2021-05-02 13:00:38 -04:00

tar.vim

vim-patch:b0ce576: runtime(tar): fix lz4 extraction on non-Linux systems

2026-06-19 09:44:07 +08:00

tutor.vim

refactor(tutor): use inline comments instead of json file #39714

2026-05-13 07:31:17 -04:00

typst.vim

vim-patch:dd89754: runtime(typst): Improve ftplugin, and syntax file

2026-07-02 08:14:48 +08:00

vimexpect.vim

fix(typo): overriden -> overridden (RE: PR #14159) (#15360)

2021-09-17 13:07:00 -04:00

xmlcomplete.vim

vim-patch:62d8f3d: runtime: Revert several "mark invalid contact addresses" commits (#37192)

2026-01-02 06:53:44 +08:00

xmlformat.vim

vim-patch:5eb10c5: runtime(xml): update XML runtime files

2026-01-08 09:30:03 +08:00