Known Vulnerabilities for Kitty by Kovid Goyal
Listed below are 7 of the newest known vulnerabilities associated with "Kitty" by "Kovid Goyal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-95835 json | Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than th... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-95834 json | Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writ... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-95832 json | Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handle... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-80432 json | Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a pro... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-80431 json | Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a progr... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-80430 json | Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-72913 json | Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py... | Not Provided | 2026-08-10 | 2026-08-11 |