zeertzjq ab41543f8e vim-patch:9.2.0073: [security]: possible command injection using netrw ...

Problem:  [security]: Insufficient validation of hostname and port in
          netrw URIs allows command injection via shell metacharacters
          (ehdgks0627, un3xploitable).
Solution: Implement stricter RFC1123 hostname and IP validation.
          Use shellescape() for the provided hostname and port.

Github Advisory:
https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336

79348dbbc0

Co-authored-by: Christian Brabandt <cb@256bit.org>

2026-04-23 12:51:11 +08:00

..

dist/opt

vim-patch:9.2.0073: [security]: possible command injection using netrw

2026-04-23 12:51:11 +08:00