Skip to content
Heist/ feed
Back to feed
Unrated

Security advisory

Type: advisorySources: OSVCVE: CVE-2023-46321

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2023-46321
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 22:35 UTC · Revision 1

Source evidence

CVE-2023-46321

core-osv · Original source

Published 22 Oct 2023, 00:00 UTC

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line.

osv:CVE-2023-46321
Complete source record
{
  "id": "e371e717721b3d3812093da813788b96b4e582431272b3c13a4d5f44bbcc635d",
  "url": "https://osv.dev/vulnerability/CVE-2023-46321",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2023-46321",
    "summary": "iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line.",
    "evidence": "osv:CVE-2023-46321",
    "products": [],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-46321",
      "aliases": [
        "CVE-2023-46321"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/gnachman/iterm2",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "5109376c9796394b8ab403d2f60d4a5973df56bc"
                },
                {
                  "introduced": "5f3eb40b42f0997fc94c5a3792ce2bfeb87b62a6"
                },
                {
                  "last_affected": "b4a3e880a698bd98c4151fe739524c93c7032c8e"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "3.4.21"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta1:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta1"
                      },
                      {
                        "last_affected": "3.5.0-beta1"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta10:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta10"
                      },
                      {
                        "last_affected": "3.5.0-beta10"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta2:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta2"
                      },
                      {
                        "last_affected": "3.5.0-beta2"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta3:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta3"
                      },
                      {
                        "last_affected": "3.5.0-beta3"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta4:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta4"
                      },
                      {
                        "last_affected": "3.5.0-beta4"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta5:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta5"
                      },
                      {
                        "last_affected": "3.5.0-beta5"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta6:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta6"
                      },
                      {
                        "last_affected": "3.5.0-beta6"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta7:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta7"
                      },
                      {
                        "last_affected": "3.5.0-beta7"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta8:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta8"
                      },
                      {
                        "last_affected": "3.5.0-beta8"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:iterm2:iterm2:3.5.0:beta9:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "3.5.0-beta9"
                      },
                      {
                        "last_affected": "3.5.0-beta9"
                      }
                    ],
                    "source": "CPE_STRING"
                  }
                ]
              }
            },
            {
              "repo": "https://gitlab.com/gnachman/iterm2",
              "type": "GIT",
              "events": [
                {
                  "introduced": "833c26999072e97d2468cfa88fc274157e879aee"
                },
                {
                  "fixed": "7c6e03bf337fe89ff834e8b2d219d2c6cb52ea55"
                },
                {
                  "fixed": "de3d351e1bd3bc1c1a4f85fe976c592e497dd071"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "2"
                      },
                      {
                        "fixed": "3.5.0beta12"
                      }
                    ],
                    "source": "DESCRIPTION"
                  },
                  {
                    "range": [
                      {
                        "fixed": "de3d351e1bd3bc1c1a4f85fe976c592e497dd071"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "3.5.0-beta1",
            "3.5.0-beta10",
            "3.5.0-beta2",
            "3.5.0-beta3",
            "3.5.0-beta4",
            "3.5.0-beta5",
            "3.5.0-beta6",
            "3.5.0-beta7",
            "3.5.0-beta8",
            "3.5.0-beta9",
            "v3.4.21",
            "v3.4.19",
            "v3.5.0beta9",
            "v20230103-nightly",
            "v20230101-nightly",
            "v20221231-nightly",
            "v20221228-nightly",
            "v20221218-nightly",
            "v20221217-nightly",
            "v20221216-nightly",
            "v20221213-nightly",
            "v20221210-nightly",
            "v20221209-nightly",
            "v20221203-nightly",
            "v20221130-nightly",
            "v20221129-nightly",
            "v20221128-nightly",
            "v20221127-nightly",
            "v20221122-nightly",
            "v20221121-nightly",
            "v3.4.18",
            "v20221120-nightly",
            "v3.5.0beta8",
            "v20221116-nightly",
            "v3.4.17",
            "v20221115-nightly",
            "v20221026-nightly",
            "v20221025-nightly",
            "v20220924-nightly",
            "v20220922-nightly",
            "v3.5.0beta7",
            "v20220915-nightly",
            "v20220914-nightly",
            "v20220912-nightly",
            "v20220905-nightly",
            "v20220904-nightly",
            "v20220901-nightly",
            "v20220831-nightly",
            "v20220830-nightly",
            "v20220828-nightly",
            "v20220825-nightly",
            "v20220824-nightly",
            "v20220823-nightly",
            "v20220818-nightly",
            "v20220815-nightly",
            "v20220810-nightly",
            "v20220806-nightly",
            "v20220804-nightly",
            "v3.4.16",
            "v20220803-nightly",
            "v20220721-nightly",
            "v20220718-nightly",
            "v20220716-nightly",
            "v20220715-nightly",
            "v20220714-nightly",
            "v20220713-nightly",
            "v20220712-nightly",
            "v20220711-nightly",
            "v20220710-nightly",
            "v20220708-nightly",
            "v20220707-nightly",
            "v20220706-nightly",
            "v20220702-nightly",
            "v20220701-nightly",
            "v3.5.0beta6",
            "img-bad",
            "img-good",
            "v20220627-nightly",
            "v20220626-nightly",
            "v20220625-nightly",
            "v20220624-nightly",
            "v20220623-nightly",
            "v20220622-nightly",
            "v20220621-nightly",
            "v20220620-nightly",
            "v20220619-nightly",
            "v20220618-nightly",
            "v20220617-nightly",
            "v20220616-nightly",
            "v20220605-nightly",
            "v20220602-nightly",
            "v20220601-nightly",
            "v20220528-nightly",
            "v20220526-nightly",
            "v20220525-nightly",
            "v20220524-nightly",
            "v20220523-nightly",
            "v20220522-nightly",
            "v20220510-nightly",
            "v20220506-nightly",
            "v20220503-nightly",
            "v20220501-nightly",
            "v20220430-nightly",
            "v20220429-nightly",
            "v20220412-nightly",
            "v20220411-nightly",
            "v20220410-nightly",
            "v20220409-nightly",
            "v20220408-nightly",
            "v20220407-nightly",
            "v20220406-nightly",
            "v20220405-nightly",
            "v20220404-nightly",
            "v20220403-nightly",
            "v20220402-nightly",
            "v20220330-nightly",
            "v20220329-nightly",
            "v20220328-nightly",
            "v20220327-nightly",
            "v20220326-nightly",
            "v20220319-nightly",
            "v20220318-nightly",
            "v20220317-nightly",
            "v20220316-nightly",
            "v20220315-nightly",
            "v20220314-nightly",
            "v20220313-nightly",
            "v20220312-nightly",
            "v3.5.0beta5",
            "v20220311-nightly",
            "v20220310-nightly",
            "v20220309-nightly",
            "v20220307-nightly",
            "v20220304-nightly",
            "v20220303-nightly",
            "v20220301-nightly",
            "v20220226-nightly",
            "v20220225-nightly",
            "v20220224-nightly",
            "v20220223-nightly",
            "v20220220-nightly",
            "v20220218-nightly",
            "v20220215-nightly",
            "v20220214-nightly",
            "v20220212-nightly",
            "v3.4.15",
            "v20220211-nightly",
            "v20220210-nightly",
            "v20220209-nightly",
            "v20220208-nightly",
            "v20220207-nightly",
            "v20220206-nightly",
            "v20220205-nightly",
            "v20220204-nightly",
            "v20220203-nightly",
            "v20220202-nightly",
            "v20220201-nightly",
            "v20220131-nightly",
            "v20220130-nightly",
            "v20220128-nightly",
            "v20220107-nightly",
            "v3.5.0beta4",
            "v3.4.14",
            "v3.5.0beta3",
            "v20211201-nightly",
            "v20211129-nightly",
            "v20211125-nightly",
            "v3.4.13",
            "v20211120-nightly",
            "v20211119-nightly",
            "v20211118-nightly",
            "v20211117-nightly",
            "v20211116-nightly",
            "v20211112-nightly",
            "v20211107-nightly",
            "v20211106-nightly",
            "v20211105-nightly",
            "v20211101-nightly",
            "v20211030-nightly",
            "v20211029-nightly",
            "v20211028-nightly",
            "v20211027-nightly",
            "v3.4.12",
            "v20211023-nightly",
            "v3.4.11",
            "v20211021-nightly",
            "v20211020-nightly",
            "v20211019-nightly",
            "v20211016-nightly",
            "v20211015-nightly",
            "v20211014-nightly",
            "v20211013-nightly",
            "v20211012-nightly",
            "v20211010-nightly",
            "v20211008-nightly",
            "v20211007-nightly",
            "v20211006-nightly",
            "v20211005-nightly",
            "v20211004-nightly",
            "v20211003-nightly",
            "v20211002-nightly",
            "v3.4.10",
            "v20210930-nightly",
            "v20210929-nightly",
            "v20210928-nightly",
            "v20210927-nightly",
            "v3.5.0beta1",
            "v20210924-nightly",
            "v3.4.9",
            "v3.4.9beta1",
            "v20210612-nightly",
            "v20210610-nightly",
            "v20210609-nightly",
            "v20210608-nightly",
            "v20210607-nightly",
            "v20210606-nightly",
            "v20210604-nightly",
            "v20210530-nightly",
            "v20210529-nightly",
            "v20210527-nightly",
            "v20210523-nightly",
            "v20210521-nightly",
            "v20210518-nightly",
            "v20210516-nightly",
            "v20210515-nightly",
            "v20210513-nightly",
            "v20210512-nightly",
            "v20210511-nightly",
            "v20210510-nightly",
            "v20210509-nightly",
            "v20210508-nightly",
            "v20210507-nightly",
            "v20210504-nightly",
            "v20210503-nightly",
            "v20210502-nightly",
            "v20210501-nightly",
            "v20210430-nightly",
            "v20210426-nightly",
            "v20210425-nightly",
            "v20210423-nightly",
            "v20210421-nightly",
            "v20210420-nightly",
            "v20210419-nightly",
            "v20210418-nightly",
            "v20210417-nightly",
            "v20210407-nightly",
            "v20210406-nightly",
            "v20210405-nightly",
            "v20210404-nightly",
            "v20210403-nightly",
            "v20210402-nightly",
            "v20210401-nightly",
            "v20210330-nightly",
            "v20210329-nightly",
            "v20210325-nightly",
            "v20210324-nightly",
            "v20210323-nightly",
            "v20210322-nightly",
            "v20210319-nightly",
            "v20210315-nightly",
            "v20210314-nightly",
            "v20210313-nightly",
            "v3.4.5beta1",
            "v20210215-nightly",
            "v20210311-nightly",
            "v20210310-nightly",
            "v20210309-nightly",
            "v20210308-nightly",
            "v20210305-nightly",
            "v20210304-nightly",
            "v20210303-nightly",
            "v20210302-nightly",
            "v20210301-nightly",
            "v20210226-nightly",
            "v20210225-nightly",
            "v20210222-nightly",
            "v20210218-nightly",
            "v20210217-nightly",
            "v20210214-nightly",
            "v20210213-nightly",
            "v20210211-nightly",
            "v20210210-nightly",
            "v20210209-nightly",
            "v20210208-nightly",
            "v20210207-nightly",
            "v20210206-nightly",
            "v20210205-nightly",
            "v20210204-nightly",
            "v20210203-nightly",
            "v20210131-nightly",
            "v20210128-nightly",
            "v20210125-nightly",
            "v3.4.4beta3",
            "v20210111-nightly",
            "v20210124-nightly",
            "v20210122-nightly",
            "v20210120-nightly",
            "v20210119-nightly",
            "v20210116-nightly",
            "v20210110-nightly",
            "v20210109-nightly",
            "v20210106-nightly",
            "v20210105-nightly",
            "v20210104-nightly",
            "v3.4.4beta2",
            "v20210103-nightly",
            "v20210102-nightly",
            "v20210101-nightly",
            "v20201231-nightly",
            "v20201230-nightly",
            "v20201229-nightly",
            "v20201228-nightly",
            "v3.4.4beta1",
            "v20201225-nightly",
            "v20201223-nightly",
            "v20201222-nightly",
            "v20201220-nightly",
            "v20201219-nightly",
            "v20201217-nightly",
            "v20201215-nightly",
            "v20201213-nightly",
            "v20201212-nightly",
            "v20201211-nightly",
            "v20201209-nightly",
            "v20201208-nightly",
            "v20201130-nightly",
            "v20201128-nightly",
            "v20201127-nightly",
            "v20201123-nightly",
            "v20201120-nightly",
            "v20201117-nightly",
            "v3.4.0",
            "v20201105-nightly",
            "vv3.4.0beta13",
            "v3.4.0beta13",
            "v20201103-nightly",
            "v20201101-nightly",
            "v20201031-nightly",
            "v20201030-nightly",
            "v20201029-nightly",
            "v3.4.0beta12",
            "v20201026-nightly",
            "v20201025-nightly",
            "v3.4.0beta11",
            "v20201016-nightly",
            "v20201015-nightly",
            "v20201012-nightly",
            "v20201011-nightly",
            "v20201009-nightly",
            "v20201008-nightly",
            "v20201007-nightly",
            "v20201005-nightly",
            "v3.4.0beta10",
            "v20201004-nightly",
            "v20201003-nightly",
            "v20201001-nightly",
            "v3.4.0beta9",
            "v20200921-nightly",
            "v3.4.0beta8",
            "v20200920-nightly",
            "v20200919-nightly",
            "v20200918-nightly",
            "v3.4.0beta7",
            "v20200916-nightly",
            "v20200914-nightly",
            "v20200913-nightly",
            "v20200912-nightly",
            "v20200911-nightly",
            "v20200910-nightly",
            "v3.4.0beta6",
            "v20200908-nightly",
            "v20200907-nightly",
            "v20200905-nightly",
            "v20200904-nightly",
            "v20200903-nightly",
            "v20200902-nightly",
            "v20200901-nightly",
            "v3.4.0beta5",
            "v20200831-nightly",
            "v20200830-nightly",
            "v20200829-nightly",
            "v20200828-nightly",
            "v20200801-nightly",
            "v20200825-nightly",
            "v20200823-nightly",
            "v20200822-nightly",
            "v20200819-nightly",
            "v20200818-nightly",
            "v20200817-nightly",
            "v3.4.0beta4",
            "v20200816-nightly",
            "v20200815-nightly",
            "v20200814-nightly",
            "v20200813-nightly",
            "v20200812-nightly",
            "v20200809-nightly",
            "v3.4.0beta3",
            "v20200808-nightly",
            "v20200807-nightly",
            "v20200806-nightly",
            "v20200727-nightly",
            "v20200726-nightly",
            "v20200725-nightly",
            "v20200724-nightly",
            "v20200723-nightly",
            "v20200722-nightly",
            "v20200721-nightly",
            "v3.4.0beta2",
            "v20200720-nightly",
            "v20200719-nightly",
            "v20200718-nightly",
            "v20200713-nightly",
            "v20200712-nightly",
            "v20200711-nightly",
            "v20200710-nightly",
            "v20200709-nightly",
            "v20200707-nightly",
            "v20200706-nightly",
            "v20200705-nightly",
            "v20200704-nightly",
            "v20200703-nightly",
            "v20200630-nightly",
            "v20200629-nightly",
            "v20200627-nightly",
            "v20200626-nightly",
            "v20200625-nightly",
            "v20200624-nightly",
            "v20200622-nightly",
            "v20200621-nightly",
            "v20200620-nightly",
            "v20200619-nightly",
            "v20200617-nightly",
            "v20200616-nightly",
            "v20200615-nightly",
            "v20200614-nightly",
            "v20200613-nightly",
            "v20200612-nightly",
            "v20200611-nightly",
            "v20200610-nightly",
            "v20200609-nightly",
            "v20200607-nightly",
            "v20200604-nightly",
            "v20200602-nightly",
            "v20200530-nightly",
            "v20200529-nightly",
            "v20200528-nightly",
            "v20200527-nightly",
            "v20200526-nightly",
            "v20200523-nightly",
            "v20200522-nightly",
            "v20200521-nightly",
            "v20200520-nightly",
            "v20200518-nightly",
            "v20200517-nightly",
            "v20200516-nightly",
            "v20200515-nightly",
            "v20200514-nightly",
            "v20200513-nightly",
            "v20200512-nightly",
            "v20200511-nightly",
            "v20200508-nightly",
            "v20200507-nightly",
            "v20200506-nightly",
            "v20200505-nightly",
            "v20200504-nightly",
            "v20200503-nightly",
            "v20200502-nightly",
            "v20200501-nightly",
            "v20200430-nightly",
            "v20200427-nightly",
            "v20200426-nightly",
            "v20200425-nightly",
            "v20200424-nightly",
            "v20200423-nightly",
            "v20200422-nightly",
            "v20200421-nightly",
            "v20200420-nightly",
            "v20200419-nightly",
            "v20200418-nightly",
            "v20200417-nightly",
            "v20200416-nightly",
            "v20200413-nightly",
            "v20200412-nightly",
            "v20200410-nightly",
            "v20200409-nightly",
            "v20200408-nightly",
            "v20200407-nightly",
            "v20200406-nightly",
            "v20200405-nightly",
            "v20200403-nightly",
            "v20200402-nightly",
            "v20200331-nightly",
            "v20200330-nightly",
            "v20200329-nightly",
            "v20200328-nightly",
            "v20200327-nightly",
            "v20200326-nightly",
            "v20200325-nightly",
            "v20200324-nightly",
            "v20200323-nightly",
            "v20200322-nightly",
            "v20200321-nightly",
            "v20200315-nightly",
            "v20200313-nightly",
            "v20200312-nightly",
            "v20200310-nightly",
            "v20200309-nightly",
            "v20200308-nightly",
            "v20200307-nightly",
            "v20200306-nightly",
            "v20200305-nightly",
            "v20200304-nightly",
            "v3.3.10beta1",
            "v20200302-nightly",
            "v20200301-nightly",
            "v20200229-nightly",
            "v20200228-nightly",
            "v20200227-nightly",
            "v20200226-nightly",
            "v20200225-nightly",
            "v20200223-nightly",
            "v20200222-nightly",
            "v20200221-nightly",
            "v20200218-nightly",
            "v20200217-nightly",
            "v20200216-nightly",
            "v20200212-nightly",
            "v20200211-nightly",
            "v20200210-nightly",
            "v20200209-nightly",
            "v20200207-nightly",
            "v20200205-nightly",
            "v20200204-nightly",
            "v20200203-nightly",
            "v20200202-nightly",
            "v20200201-nightly",
            "v20200129-nightly",
            "v20200121-nightly",
            "v20200128-nightly",
            "v20200127-nightly",
            "v20200126-nightly",
            "v20200125-nightly",
            "v20200122-nightly",
            "v20200120-nightly",
            "v20200112-nightly",
            "v20200111-nightly",
            "v20200110-nightly",
            "v20200109-nightly",
            "v20200108-nightly",
            "v20200107-nightly",
            "v20200106-nightly",
            "v20200105-nightly",
            "v20200104-nightly",
            "v20200102-nightly",
            "v20200101-nightly",
            "v20191231-nightly",
            "v20191230-nightly",
            "v20191226-nightly",
            "v20191225-nightly",
            "v20191224-nightly",
            "v20191223-nightly",
            "v20191220-nightly",
            "v20191218-nightly",
            "v3.3.8beta3",
            "v20191217-nightly",
            "v3.3.8beta2",
            "v20191215-nightly",
            "v20191214-nightly",
            "v20191213-nightly",
            "v20191212-nightly",
            "v20191210-nightly",
            "v20191209-nightly",
            "v20191208-nightly",
            "v20191207-nightly",
            "v20191206-nightly",
            "v20191205-nightly",
            "v20191204-nightly",
            "v20191203-nightly",
            "v20191202-nightly",
            "v20191127-nightly",
            "v20191126-nightly",
            "v3.3.8beta1",
            "v20191125-nightly",
            "v20191124-nightly",
            "v20191123-nightly",
            "v20191122-nightly",
            "v20191121-nightly",
            "v20191120-nightly",
            "v20191118-nightly",
            "v3.3.7beta4",
            "v20191117-nightly",
            "v20191115-nightly",
            "v20191114-nightly",
            "v20191113-nightly",
            "v20191112-nightly",
            "v20191111-nightly",
            "v20191110-nightly",
            "v20191108-nightly",
            "v20191107-nightly",
            "v20191106-nightly",
            "v20191105-nightly",
            "v3.3.7beta3",
            "v20191104-nightly",
            "v20191101-nightly",
            "v20190623-nightly",
            "v20190829-nightly",
            "v20191030-nightly",
            "v20191029-nightly",
            "v3.3.7beta2",
            "v20191023-nightly",
            "v20191020-nightly",
            "v20191018-nightly",
            "v20191016-nightly",
            "v20191015-nightly",
            "v20191013-nightly",
            "v20191011-nightly",
            "v3.3.7beta1",
            "v20191004-nightly",
            "v20190930-nightly",
            "v20190929-nightly",
            "v3.3.5beta2",
            "v20190920-nightly",
            "v20190919-nightly",
            "v20190917-nightly",
            "v20190916-nightly",
            "v3.3.5beta1",
            "v20190914-nightly",
            "v20190913-nightly",
            "v20190912-nightly",
            "v20190911-nightly",
            "v20190909-nightly",
            "v3.3.4",
            "v3.3.4beta1",
            "v20190908-nightly",
            "v20190907-nightly",
            "v20190906-nightly",
            "v20190905-nightly",
            "v3.3.3beta2",
            "v20190904-nightly",
            "v20190828-nightly",
            "v20190827-nightly",
            "v20190826-nightly",
            "v20190825-nightly",
            "v20190824-nightly",
            "v20190823-nightly",
            "v20190822-nightly",
            "v20190820-nightly",
            "v3.3.3beta1",
            "v20190819-nightly",
            "v3.3.2beta2",
            "v20190818-nightly",
            "v20190816-nightly",
            "v20190815-nightly",
            "v20190814-nightly",
            "v20190813-nightly",
            "v20190812-nightly",
            "v20190810-nightly",
            "v20190809-nightly",
            "v20190808-nightly",
            "v20190807-nightly",
            "v3.3.2beta1",
            "v20190806-nightly",
            "v20190802-nightly",
            "v20190801-nightly",
            "v3.3.0beta16",
            "v20190729-nightly",
            "v20190731-nightly",
            "v20190728-nightly",
            "v20190725-nightly",
            "v20190724-nightly",
            "v20190722-nightly",
            "v3.3.0beta15",
            "v20190717-nightly",
            "v20190721-nightly",
            "v3.3.0beta14",
            "v20190719-nightly",
            "v20190715-nightly",
            "v20190626-nightly",
            "v20190625-nightly",
            "v3.3.0beta13",
            "v20190617-nightly",
            "v3.3.0beta12",
            "v20190616-nightly",
            "v20190615-nightly",
            "v20190614-nightly",
            "v20190613-nightly",
            "v20190610-nightly",
            "v3.3.0beta11",
            "v20190606-nightly",
            "v20190603-nightly",
            "v20190604-nightly",
            "v3.3.0beta10",
            "v20190602-nightly",
            "v20190601-nightly",
            "v20190531-nightly",
            "v20190530-nightly",
            "v20190529-nightly",
            "v20190528-nightly",
            "v3.3.0beta9",
            "v20190527-nightly",
            "v20190526-nightly",
            "v20190523-nightly",
            "v20190522-nightly",
            "v20190521-nightly",
            "v20190520-nightly",
            "v3.3.0beta8",
            "v20190519-nightly",
            "v20190517-nightly",
            "v20190516-nightly",
            "v20190515-nightly",
            "v20190514-nightly",
            "v3.3.0beta7",
            "v20190512-nightly",
            "v20190511-nightly",
            "v20190510-nightly",
            "v20190508-nightly",
            "v20190507-nightly",
            "v3.3.0beta6",
            "v20190506-nightly",
            "v20190502-nightly",
            "v20190430-nightly",
            "v20190429-nightly",
            "v3.3.0beta5",
            "v20190428-nightly",
            "v20190427-nightly",
            "v20190425-nightly",
            "v20190424-nightly",
            "v20190423-nightly",
            "v20190422-nightly",
            "v3.3.0beta4",
            "v20190421-nightly",
            "v20190420-nightly",
            "v20190418-nightly",
            "v20190415-nightly",
            "v3.3.0beta3",
            "v20190414-nightly",
            "v20190413-nightly",
            "v20190412-nightly",
            "v20190411-nightly",
            "v20190407-nightly",
            "v20190405-nightly",
            "v20190404-nightly",
            "v20190403-nightly",
            "v20190402-nightly",
            "v20190401-nightly",
            "v3.3.0beta2",
            "v20190331-nightly",
            "v20190329-nightly",
            "v20190328-nightly",
            "v20190327-nightly",
            "v20190326-nightly",
            "v20190325-nightly",
            "v3.3.0beta1",
            "v20190324-nightly",
            "v20190323-nightly",
            "v20190322-nightly",
            "v20190321-nightly",
            "v20190320-nightly",
            "v20190319-nightly",
            "v20190318-nightly",
            "v20190317-nightly",
            "v20190315-nightly",
            "v20190313-nightly",
            "v20190312-nightly",
            "v20190310-nightly",
            "v20190309-nightly",
            "v20190308-nightly",
            "v20190307-nightly",
            "v20190306-nightly",
            "v20190304-nightly",
            "v20190303-nightly",
            "v20190302-nightly",
            "v20190228-nightly",
            "v20190226-nightly",
            "v20190225-nightly",
            "v20190224-nightly",
            "v20190222-nightly",
            "v20190220-nightly",
            "v20190219-nightly",
            "v20190218-nightly",
            "v20190217-nightly",
            "v20190215-nightly",
            "v20190214-nightly",
            "v20190212-nightly",
            "v20190211-nightly",
            "v20190210-nightly",
            "v20190207-nightly",
            "v20190206-nightly",
            "v20190205-nightly",
            "v20190204-nightly",
            "v20190203-nightly",
            "v20190117-nightly",
            "v20190116-nightly",
            "v20190115-nightly",
            "v20190114-nightly",
            "v20190113-nightly",
            "v20190112-nightly",
            "v20190111-nightly",
            "v20190110-nightly",
            "v20190109-nightly",
            "v20190106-nightly",
            "v20190105-nightly",
            "v20190104-nightly",
            "v20190103-nightly",
            "v20190102-nightly",
            "v20190101-nightly",
            "v20181231-nightly",
            "v20181230-nightly",
            "v20181229-nightly",
            "v20181228-nightly",
            "v20181227-nightly",
            "v20181226-nightly",
            "v20181225-nightly",
            "v20181224-nightly",
            "v20181223-nightly",
            "v20181222-nightly",
            "v20181221-nightly",
            "v20181220-nightly",
            "v20181219-nightly",
            "v20181218-nightly",
            "v20181217-nightly",
            "v20181215-nightly",
            "v20181214-nightly",
            "v20181213-nightly",
            "v20181212-nightly",
            "v20181211-nightly",
            "v20181210-nightly",
            "v20181209-nightly",
            "v20181208-nightly",
            "v20181207-nightly",
            "v20181206-nightly",
            "v20181205-nightly",
            "v20181204-nightly",
            "v20181203-nightly",
            "v20181202-nightly",
            "v20181201-nightly",
            "v20181130-nightly",
            "v20181129-nightly",
            "v20181128-nightly",
            "v20181127-nightly",
            "v20181126-nightly",
            "v20181125-nightly",
            "v20181124-nightly",
            "v20181123-nightly",
            "v20181122-nightly",
            "v20181121-nightly",
            "v20181120-nightly",
            "v20181119-nightly",
            "v20181118-nightly",
            "v20181117-nightly",
            "v20181116-nightly",
            "v20181112-nightly",
            "v20181111-nightly",
            "v20181110-nightly",
            "v20181109-nightly",
            "v20181108-nightly",
            "v20181107-nightly",
            "v20181106-nightly",
            "v20181105-nightly",
            "v20181104-nightly",
            "v20181029-nightly",
            "v20181028-nightly",
            "v20181027-nightly",
            "v20181026-nightly",
            "v20181025-nightly",
            "v20181024-nightly",
            "v20181023-nightly",
            "v20181022-nightly",
            "v20181021-nightly",
            "v20181020-nightly",
            "v20181018-nightly",
            "v20181016-nightly",
            "v20181015-nightly",
            "v20181014-nightly",
            "v20181013-nightly",
            "v20181012-nightly",
            "v20181011-nightly",
            "v20181010-nightly",
            "v20181009-nightly",
            "v20181008-nightly",
            "v20181007-nightly",
            "v20181006-nightly",
            "v20181005-nightly",
            "v20181004-nightly",
            "v20181003-nightly",
            "v20181002-nightly",
            "v20181001-nightly",
            "v20180930-nightly",
            "v20180929-nightly",
            "v20180928-nightly",
            "v20180927-nightly",
            "v20180926-nightly",
            "v20180925-nightly",
            "v20180924-nightly",
            "v20180919-nightly",
            "v20180918-nightly",
            "v3.1.6beta3",
            "v3.1.6beta2",
            "v3.1.5",
            "v3.1.5.beta.2",
            "v3.1.5.beta.1",
            "v3.1.4.beta.1",
            "v3.1.3.beta.1",
            "v3.1.3",
            "v3.1.2.beta.2",
            "v3.1.2.beta.1",
            "v3.1.0",
            "v3.1.beta.10",
            "v3.1.beta.9",
            "v3.1.beta.8",
            "v3.1.beta.7",
            "v3.1.beta.6",
            "v3.1.beta.5",
            "v3.1.beta.3",
            "v3.1.beta.2",
            "v3.1.beta.1",
            "v3.1.0.beta",
            "v3.0.4",
            "v+3.0.4",
            "v3.0.3",
            "v3.0.2",
            "v3.0.2-preview",
            "v3.0.1-preview",
            "v3.0.20160531",
            "v3.0.0",
            "v2.9.20160523",
            "v2.9.20160426",
            "v2.9.20160313",
            "v2.9.20160102",
            "v2.9.20151229",
            "v2.9.20151111",
            "v1.0.0.20130613",
            "v20130302",
            "v1.0.0.20130210",
            "v1.0.0.20120726",
            "v1.0.0.20120203",
            "v1.0.0.20120107",
            "v1.0.0.20111219",
            "v1.0.0.20111020",
            "v1.0.0.20111009",
            "v1.0.0.20110909",
            "v1.0.0.20110907b",
            "v1.0.0.20110907",
            "v1.0.0.20110828",
            "v1.0.0.20110821",
            "v1.0.0.20110810",
            "v1.0.0.20110804",
            "v1.0.0.20110727",
            "v1.0.0.20110724"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46321.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.908291820Z",
      "provider": "osv",
      "references": [
        "https://iterm2.com/downloads.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46321.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-46321",
        "https://gitlab.com/gnachman/iterm2/-/commit/de3d351e1bd3bc1c1a4f85fe976c592e497dd071"
      ],
      "provider_metadata": {
        "cna_assigner": "mitre",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46321.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-46321",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 490589,
  "published_at": "2023-10-22T00:00:00+00:00"
}