Romkatv

4 CVEs in 2 Romkatv products, including Powerlevel10k, Gitstatus. Newest: CVE-2026-122137 (2026-11-04). Severity, EPSS and public exploits for each.

Romkatv products with known CVEs

ProductCVEs
Powerlevel10k4
Gitstatus1
Romkatv CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-122137Medium6.72026-11-04Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable dire…
CVE-2026-122136Medium4.42026-11-04Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable fi…
CVE-2026-110102High7.52026-10-13Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -…
CVE-2026-75483Low3.32026-08-17powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw esca…