Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:powerlevel10k_project:powerlevel10k:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Insecure Download Vulnerability in Powerlevel10k gitstatus Component

Powerlevel10k versions through 1.20.0 execute malicious code via an insecure gitstatus installation script that disables TLS certificate verification and lacks integrity checks.

Powerlevel10k insecure-download code-execution shell-security supply-chain
2t 1c