Justin M. Keyes f83e0dcaf8 fix(vim.secure): read() command injection vulnerability #39918 ...

Problem:
Malicious filename can execute code because of ":" cmdline expansion.

Solution:
Use `fnameescape()`.

fix https://github.com/neovim/neovim/issues/39914

(cherry picked from commit 799cbfff85)

2026-05-20 20:00:45 +00:00

..

nvim

backport: opts.scope in vim.ui.input (#39906)

2026-05-20 08:44:03 +00:00

uv

build(deps): bump luv to 1.52.1-0

2026-03-16 10:29:58 +01:00

vim

fix(vim.secure): read() command injection vulnerability #39918

2026-05-20 20:00:45 +00:00

coxpcall.lua

build: add luals check

2025-02-09 18:10:54 +01:00

editorconfig.lua

backport fix(lsp): send didClose, didOpen when languageId changes (#39519)

2026-04-30 13:09:55 +00:00

man.lua

test: fix s390x failures

2026-03-29 13:36:56 +02:00