High
Oh My Posh: Arbitrary command execution via template injection in the path segment
Type: advisorySources: OSV
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that directory or a descendant. This issue is fixed in version 29.35.1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-73505
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 02:35 UTC · Revision 1
Source evidence
Oh My Posh: Arbitrary command execution via template injection in the path segment
core-osv · Original sourcePublished 13 Aug 2026, 14:21 UTC
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that directory or a descendant. This issue is fixed in version 29.35.1.
osv:CVE-2026-73505
Complete source record
{
"id": "cb9bfeddddd118b5d530b99fb215d7353abf5fc648d183bc503e6cf30be4620c",
"url": "https://osv.dev/vulnerability/CVE-2026-73505",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Oh My Posh: Arbitrary command execution via template injection in the path segment",
"summary": "Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that directory or a descendant. This issue is fixed in version 29.35.1.",
"evidence": "osv:CVE-2026-73505",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-73505",
"aliases": [
"CVE-2026-73505",
"GHSA-6xj8-qv9j-xcjq",
"GO-2026-6108"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/jandedobbeleer/oh-my-posh",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "2f30a8785294eef39c90c4ded5906dd098cbc36e"
},
{
"fixed": "88ddbe0b0a4dd13cc345996108c9869493f2c690"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "29.35.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "88ddbe0b0a4dd13cc345996108c9869493f2c690"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "2f30a8785294eef39c90c4ded5906dd098cbc36e"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v29.35.1"
}
]
}
}
],
"versions": [
"v29.35.0",
"v29.34.0",
"v29.33.0",
"v29.32.0",
"v29.31.1",
"v29.31.0",
"v29.30.0",
"v29.29.0",
"v29.28.0",
"v29.27.0",
"v29.26.1",
"v29.26.0",
"v29.25.1",
"v29.25.0",
"v29.24.1",
"v29.24.0",
"v29.23.0",
"v29.22.1",
"v29.22.0",
"v29.21.0",
"v29.20.1",
"v29.20.0",
"v29.19.1",
"v29.19.0",
"v29.18.0",
"v29.17.0",
"v29.16.0",
"v29.15.1",
"v29.15.0",
"v29.14.0",
"v29.13.1",
"v29.13.0",
"v29.12.0",
"v29.11.0",
"v29.10.0",
"v29.9.4",
"v29.9.3",
"v29.9.2",
"v29.9.1",
"v29.9.0",
"v29.8.0",
"v29.7.1",
"v29.7.0",
"v29.6.1",
"v29.6.0",
"v29.5.0",
"v29.4.1",
"v29.4.0",
"v29.3.0",
"v29.2.2",
"v29.2.1",
"v29.2.0",
"v29.1.0",
"v29.0.2",
"v29.0.1",
"v29.0.0",
"v28.10.0",
"v28.9.0",
"v28.8.1",
"v28.8.0",
"v28.7.0",
"v28.6.0",
"v28.5.1",
"v28.5.0",
"v28.4.0",
"v28.3.1",
"v28.3.0",
"v28.2.2",
"v28.2.1",
"v28.2.0",
"v28.1.1",
"v28.1.0",
"v28.0.0",
"v27.6.0",
"v27.5.2",
"v27.5.1",
"v27.5.0",
"v27.4.4",
"v27.4.3",
"v27.4.2",
"v27.4.1",
"v27.4.0",
"v27.3.1",
"v27.3.0",
"v27.2.1",
"v27.2.0",
"v27.1.2",
"v27.1.1",
"v27.1.0",
"v27.0.0",
"v26.26.3",
"v26.26.2",
"v26.26.1",
"v26.26.0",
"v26.25.0",
"v26.24.1",
"v26.24.0",
"v26.23.9",
"v26.23.8",
"v26.23.7",
"v26.23.6",
"v26.23.5",
"v26.23.4",
"v26.23.3",
"v26.23.2",
"v26.23.1",
"v26.23.0",
"v26.22.3",
"v26.22.2",
"v26.22.1",
"v26.22.0",
"v26.21.0",
"v26.20.1",
"v26.20.0",
"v26.19.2",
"v26.19.1",
"v26.19.0",
"v26.18.0",
"v26.17.3",
"v26.17.2",
"v26.17.1",
"v26.17.0",
"v26.16.1",
"v26.16.0",
"v26.15.0",
"v26.14.3",
"v26.14.2",
"v26.14.1",
"v26.14.0",
"v26.13.0",
"v26.12.0",
"v26.11.0",
"v26.10.1",
"v26.10.0",
"v26.9.0",
"v26.8.0",
"v26.7.0",
"v26.6.1",
"v26.6.0",
"v26.5.0",
"v26.4.2",
"v26.4.1",
"v26.4.0",
"v26.3.0",
"v26.2.2",
"v26.2.1",
"v26.2.0",
"v26.1.0",
"v26.0.5",
"v26.0.4",
"v26.0.3",
"v26.0.2",
"v26.0.1",
"v26.0.0",
"v25.23.3",
"v25.23.2",
"v25.23.1",
"v25.23.0",
"v25.22.0",
"v25.21.1",
"v25.21.0",
"v25.20.1",
"v25.20.0",
"v25.19.0",
"v25.18.0",
"v25.17.0",
"v25.16.1",
"v25.16.0",
"v25.15.0",
"v25.14.0",
"v25.13.0",
"v25.12.0",
"v25.11.2",
"v25.11.1",
"v25.11.0",
"v25.10.2",
"v25.10.1",
"v25.10.0",
"v25.9.0",
"v25.8.0",
"v25.7.1",
"v25.7.0",
"v25.6.1",
"v25.6.0",
"v25.5.1",
"v25.5.0",
"v25.4.3",
"v25.4.2",
"v25.4.1",
"v25.4.0",
"v25.3.0",
"v25.2.1",
"v25.2.0",
"v25.1.1",
"v25.1.0",
"v25.0.0",
"v24.19.0",
"v24.18.1",
"v24.18.0",
"v24.17.1",
"v24.17.0",
"v24.16.1",
"v24.16.0",
"v24.15.1",
"v24.15.0",
"v24.14.0",
"v24.13.1",
"v24.13.0",
"v24.12.0",
"v24.11.4",
"v24.11.3",
"v24.11.2",
"v24.11.1",
"v24.11.0",
"v24.10.1",
"v24.10.0",
"v24.9.1",
"v24.9.0",
"v24.8.0",
"v24.7.2",
"v24.7.1",
"v24.7.0",
"v24.6.5",
"v24.6.4",
"v24.6.3",
"v24.6.2",
"v24.6.1",
"v24.6.0",
"v24.5.2",
"v24.5.1",
"v24.5.0",
"v24.4.1",
"v24.4.0",
"v24.3.0",
"v24.2.2",
"v24.2.1",
"v24.2.0",
"v24.1.0",
"v24.0.11",
"v24.0.10",
"v24.0.9",
"v24.0.8",
"v24.0.7",
"v24.0.6",
"v24.0.5",
"v24.0.4",
"v24.0.3",
"v24.0.2",
"v24.0.1",
"v24.0.0",
"v23.20.3",
"v23.20.2",
"v23.20.1",
"v23.20.0",
"v23.19.0",
"v23.18.0",
"v23.17.0",
"v23.16.0",
"v23.15.3",
"v23.15.2",
"v23.15.1",
"v23.15.0",
"v23.14.2",
"v23.14.1",
"v23.14.0",
"v23.13.4",
"v23.13.3",
"v23.13.2",
"v23.13.1",
"v23.13.0",
"v23.12.0",
"v23.11.1",
"v23.11.0",
"v23.10.1",
"v23.10.0",
"v23.9.1",
"v23.9.0",
"v23.8.0",
"v23.7.2",
"v23.7.1",
"v23.7.0",
"v23.6.8",
"v23.6.7",
"v23.6.6",
"v23.6.5",
"v23.6.4",
"v23.6.3",
"v23.6.2",
"v23.6.1",
"v23.6.0",
"v23.5.0",
"v23.4.1",
"v23.4.0",
"v23.3.3",
"v23.3.2",
"v23.3.1",
"v23.3.0",
"v23.2.1",
"v23.2.0",
"v23.1.0",
"v23.0.2",
"v23.0.1",
"v23.0.0",
"v22.3.0",
"v22.2.0",
"v22.1.0",
"v22.0.3",
"v22.0.2",
"v22.0.1",
"v22.0.0",
"v21.28.0",
"v21.27.0",
"v21.26.4",
"v21.26.3",
"v21.26.2",
"v21.26.1",
"v21.26.0",
"v21.25.0",
"v21.24.0",
"v21.23.6",
"v21.23.5",
"v21.23.4",
"v21.23.3",
"v21.23.2",
"v21.23.1",
"v21.23.0",
"v21.22.0",
"v21.21.3",
"v21.21.2",
"v21.21.1",
"v21.21.0",
"v21.20.2",
"v21.20.1",
"v21.20.0",
"v21.19.0",
"v21.18.2",
"v21.18.1",
"v21.18.0",
"v21.17.2",
"v21.17.1",
"v21.17.0",
"v21.16.2",
"v21.16.1",
"v21.16.0",
"v21.15.1",
"v21.15.0",
"v21.14.0",
"v21.13.1",
"v21.13.0",
"v21.12.1",
"v21.12.0",
"v21.11.0",
"v21.10.3",
"v21.10.2",
"v21.10.1",
"v21.10.0",
"v21.9.1",
"v21.9.0",
"v21.8.0",
"v21.7.0",
"v21.6.0",
"v21.5.0",
"v21.4.0",
"v21.3.0",
"v21.2.2",
"v21.2.1",
"v21.2.0",
"v21.1.0",
"v21.0.1",
"v21.0.0",
"v20.2.3",
"v20.2.2",
"v20.2.1",
"v20.2.0",
"v20.1.0",
"v20.0.2",
"v20.0.1",
"v20.0.0",
"v19.32.0",
"v19.31.0",
"v19.30.0",
"v19.29.1",
"v19.29.0",
"v19.28.0",
"v19.27.0",
"v19.26.1",
"v19.26.0",
"v19.25.0",
"v19.24.3",
"v19.24.2",
"v19.24.1",
"v19.24.0",
"v19.23.1",
"v19.23.0",
"v19.22.0",
"v19.21.1",
"v19.21.0",
"v19.20.0",
"v19.19.0",
"v19.18.1",
"v19.18.0",
"v19.17.2",
"v19.17.1",
"v19.17.0",
"v19.16.2",
"v19.16.1",
"v19.16.0",
"v19.15.1",
"v19.15.0",
"v19.14.0",
"v19.13.0",
"v19.12.0",
"v19.11.7",
"v19.11.6",
"v19.11.5",
"v19.11.4",
"v19.11.3",
"v19.11.2",
"v19.11.1",
"v19.11.0",
"v19.10.0",
"v19.9.0",
"v19.8.3",
"v19.8.2",
"v19.8.1",
"v19.8.0",
"v19.7.0",
"v19.6.0",
"v19.5.2",
"v19.5.1",
"v19.5.0",
"v19.4.0",
"v19.3.1",
"v19.3.0",
"v19.2.1",
"v19.2.0",
"v19.1.1",
"v19.1.0",
"v19.0.0",
"v18.28.0",
"v18.27.1",
"v18.27.0",
"v18.26.1",
"v18.26.0",
"v18.25.1",
"v18.25.0",
"v18.24.0",
"v18.23.3",
"v18.23.2",
"v18.23.1",
"v18.23.0",
"v18.22.0",
"v18.21.1",
"v18.21.0",
"v18.20.0",
"v18.19.0",
"v18.18.1",
"v18.18.0",
"v18.17.3",
"v18.17.2",
"v18.17.1",
"v18.17.0",
"v18.16.2",
"v18.16.1",
"v18.16.0",
"v18.15.0",
"v18.14.1",
"v18.14.0",
"v18.13.1",
"v18.13.0",
"v18.12.0",
"v18.11.0",
"v18.10.3",
"v18.10.2",
"v18.10.1",
"v18.10.0",
"v18.9.1",
"v18.9.0",
"v18.8.1",
"v18.8.0",
"v18.7.0",
"v18.6.4",
"v18.6.3",
"v18.6.2",
"v18.6.1",
"v18.6.0",
"v18.5.1",
"v18.5.0",
"v18.4.0",
"v18.3.5",
"v18.3.4",
"v18.3.3",
"v18.3.2",
"v18.3.1",
"v18.3.0",
"v18.2.5",
"v18.2.4",
"v18.2.3",
"v18.2.2",
"v18.2.1",
"v18.2.0",
"v18.1.0",
"v18.0.1",
"v18.0.0",
"v17.12.1",
"v17.12.0",
"v17.11.3",
"v17.11.2",
"v17.11.1",
"v17.11.0",
"v17.10.0",
"v17.9.1",
"v17.9.0",
"v17.8.0",
"v17.7.0",
"v17.6.0",
"v17.5.3",
"v17.5.2",
"v17.5.1",
"v17.5.0",
"v17.4.0",
"v17.3.0",
"v17.2.0",
"v17.1.0",
"v17.0.0",
"v16.10.0",
"v16.9.1",
"v16.9.0",
"v16.8.0",
"v16.7.2",
"v16.7.1",
"v16.7.0",
"v16.6.0",
"v16.5.0",
"v16.4.4",
"v16.4.3",
"v16.4.2",
"v16.4.1",
"v16.4.0",
"v16.3.0",
"v16.2.3",
"v16.2.2",
"v16.2.1",
"v16.2.0",
"v16.1.1",
"v16.1.0",
"v16.0.0",
"v15.5.0",
"v15.4.3",
"v15.4.2",
"v15.4.1",
"v15.4.0",
"v15.3.0",
"v15.2.0",
"v15.1.0",
"v15.0.0",
"v14.32.2",
"v14.32.1",
"v14.32.0",
"v14.31.7",
"v14.31.6",
"v14.31.5",
"v14.31.4",
"v14.31.3",
"v14.31.2",
"v14.31.1",
"v14.31.0",
"v14.30.0",
"v14.29.3",
"v14.29.2",
"v14.29.1",
"v14.29.0",
"v14.28.0",
"v14.27.0",
"v14.26.0",
"v14.25.1",
"v14.25.0",
"v14.24.0",
"v14.23.1",
"v14.23.0",
"v14.22.0",
"v14.21.0",
"v14.20.0",
"v14.19.5",
"v14.19.4",
"v14.19.3",
"v14.19.2",
"v14.19.1",
"v14.19.0",
"v14.18.0",
"v14.17.0",
"v14.16.0",
"v14.15.0",
"v14.14.4",
"v14.14.3",
"v14.14.2",
"v14.14.1",
"v14.14.0",
"v14.13.1",
"v14.13.0",
"v14.12.1",
"v14.12.0",
"v14.11.0",
"v14.10.1",
"v14.10.0",
"v14.9.2",
"v14.9.1",
"v14.9.0",
"v14.8.0",
"v14.7.1",
"v14.7.0",
"v14.6.0",
"v14.5.0",
"v14.4.0",
"v14.3.0",
"v14.2.8",
"v14.2.7",
"v14.2.6",
"v14.2.5",
"v14.2.4",
"v14.2.3",
"v14.2.2",
"v14.2.1",
"v14.2.0",
"v14.1.2",
"v14.1.1",
"v14.1.0",
"v14.0.3",
"v14.0.2",
"v14.0.1",
"v14.0.0",
"v13.9.0",
"v13.8.0",
"v13.7.0",
"v13.6.0",
"v13.5.0",
"v13.4.0",
"v13.3.1",
"v13.3.0",
"v13.2.0",
"v13.1.2",
"v13.1.1",
"v13.1.0",
"v13.0.0",
"v12.40.0",
"v12.39.1",
"v12.39.0",
"v12.38.1",
"v12.38.0",
"v12.37.0",
"v12.36.0",
"v12.35.2",
"v12.35.1",
"v12.35.0",
"v12.34.6",
"v12.34.5",
"v12.34.4",
"v12.34.3",
"v12.34.2",
"v12.34.1",
"v12.34.0",
"v12.33.1",
"v12.33.0",
"v12.32.0",
"v12.31.1",
"v12.31.0",
"v12.30.1",
"v12.30.0",
"v12.29.0",
"v12.28.3",
"v12.28.2",
"v12.28.1",
"v12.28.0",
"v12.27.0",
"v12.26.8",
"v12.26.6",
"v12.26.5",
"v12.26.4",
"v12.26.3",
"v12.26.2",
"v12.26.1",
"v12.26.0",
"v12.25.3",
"v12.25.2",
"v12.25.1",
"v12.25.0",
"v12.24.0",
"v12.23.0",
"v12.22.0",
"v12.21.0",
"v12.20.0",
"v12.19.0",
"v12.18.3",
"v12.18.2",
"v12.18.1",
"v12.18.0",
"v12.17.3",
"v12.17.2",
"v12.17.1",
"v12.17.0",
"v12.16.1",
"v12.16.0",
"v12.15.1",
"v12.15.0",
"v12.14.1",
"v12.14.0",
"v12.13.3",
"v12.13.2",
"v12.13.1",
"v12.13.0",
"v12.12.1",
"v12.12.0",
"v12.11.0",
"v12.10.0",
"v12.9.1",
"v12.9.0",
"v12.8.0",
"v12.7.1",
"v12.7.0",
"v12.6.8",
"v12.6.7",
"v12.6.6",
"v12.6.5",
"v12.6.4",
"v12.6.3",
"v12.6.2",
"v12.6.1",
"v12.6.0",
"v12.5.1",
"v12.5.0",
"v12.4.0",
"v12.3.3",
"v12.3.2",
"v12.3.1",
"v12.3.0",
"v12.2.2",
"v12.2.1",
"v12.2.0",
"v12.1.0",
"v12.0.1",
"v12.0.0",
"v11.4.0",
"v11.3.3",
"v11.3.2",
"v11.3.1",
"v11.3.0",
"v11.2.0",
"v11.1.1",
"v11.1.0",
"v11.0.1",
"v11.0.0",
"v10.3.0",
"v10.2.0",
"v10.1.0",
"v10.0.1",
"v10.0.0",
"v9.5.0",
"v9.4.1",
"v9.4.0",
"v9.3.4",
"v9.3.3",
"v9.3.2",
"v9.3.1",
"v9.3.0",
"v9.2.0",
"v9.1.0",
"v9.0.0",
"v8.37.1",
"v8.37.0",
"v8.36.7",
"v8.36.6",
"v8.36.5",
"v8.36.4",
"v8.36.3",
"v8.36.2",
"v8.36.1",
"v8.36.0",
"v8.35.2",
"v8.35.1",
"v8.35.0",
"v8.34.0",
"v8.33.2",
"v8.33.1",
"v8.33.0",
"v8.32.4",
"v8.32.3",
"v8.32.2",
"v8.32.1",
"v8.32.0",
"v8.31.1",
"v8.31.0",
"v8.30.0",
"v8.29.5",
"v8.29.4",
"v8.29.3",
"v8.29.2",
"v8.29.1",
"v8.29.0",
"v8.28.0",
"v8.27.0",
"v8.26.1",
"v8.26.0",
"v8.25.0",
"v8.24.0",
"v8.23.3",
"v8.23.2",
"v8.23.1",
"v8.23.0",
"v8.22.9",
"v8.22.8",
"v8.22.7",
"v8.22.6",
"v8.22.5",
"v8.22.4",
"v8.22.3",
"v8.22.2",
"v8.22.1",
"v8.22.0",
"v8.21.0",
"v8.20.1",
"v8.20.0",
"v8.19.0",
"v8.18.0",
"v8.17.1",
"v8.17.0",
"v8.16.0",
"v8.15.3",
"v8.15.2",
"v8.15.1",
"v8.15.0",
"v8.14.0",
"v8.13.1",
"v8.13.0",
"v8.12.0",
"v8.11.2",
"v8.11.1",
"v8.11.0",
"v8.10.2",
"v8.10.1",
"v8.10.0",
"v8.9.2",
"v8.9.1",
"v8.9.0",
"v8.8.1",
"v8.8.0",
"v8.7.1",
"v8.7.0",
"v8.6.2",
"v8.6.1",
"v8.6.0",
"v8.5.3",
"v8.5.2",
"v8.5.1",
"v8.5.0",
"v8.4.0",
"v8.3.2",
"v8.3.1",
"v8.3.0",
"v8.2.0",
"v8.1.1",
"v8.1.0",
"v8.0.1",
"v8.0.0",
"v7.95.0",
"v7.94.1",
"v7.94.0",
"v7.93.1",
"v7.93.0",
"v7.92.2",
"v7.92.1",
"v7.92.0",
"v7.91.3",
"v7.91.2",
"v7.91.1",
"v7.91.0",
"v7.90.2",
"v7.90.1",
"v7.90.0",
"v7.89.0",
"v7.88.1",
"v7.88.0",
"v7.87.0",
"v7.86.0",
"v7.85.4",
"v7.85.3",
"v7.85.2",
"v7.85.1",
"v7.85.0",
"v7.84.0",
"v7.83.0",
"v7.82.1",
"v7.82.0",
"v7.81.4",
"v7.81.3",
"v7.81.2",
"v7.81.1",
"v7.81.0",
"v7.80.1",
"v7.80.0",
"v7.79.6",
"v7.79.5",
"v7.79.4",
"v7.79.3",
"v7.79.2",
"v7.79.1",
"v7.79.0",
"v7.78.0",
"v7.77.0",
"v7.76.0",
"v7.75.0",
"v7.74.4",
"v7.74.3",
"v7.74.2",
"v7.74.1",
"v7.74.0",
"v7.73.1",
"v7.73.0",
"v7.72.6",
"v7.72.5",
"v7.72.4",
"v7.72.3",
"v7.72.2",
"v7.72.1",
"v7.72.0",
"v7.71.2",
"v7.71.1",
"v7.71.0",
"v7.70.1",
"v7.70.0",
"v7.69.0",
"v7.68.0",
"v7.67.0",
"v7.66.0",
"v7.65.0",
"v7.64.2",
"v7.64.1",
"v7.64.0",
"v7.63.0",
"v7.62.3",
"v7.62.2",
"v7.62.1",
"v7.62.0",
"v7.61.0",
"v7.60.0",
"v7.59.6",
"v7.59.5",
"v7.59.4",
"v7.59.3",
"v7.59.2",
"v7.59.1",
"v7.59.0",
"v7.58.3",
"v7.58.2",
"v7.58.1",
"v7.58.0",
"v7.57.3",
"v7.57.2",
"v7.57.1",
"v7.57.0",
"v7.56.1",
"v7.56.0",
"v7.55.2",
"v7.55.1",
"v7.55.0",
"v7.54.0",
"v7.53.0",
"v7.52.1",
"v7.52.0",
"v7.51.0",
"v7.50.0",
"v7.49.1",
"v7.49.0",
"v7.48.0",
"v7.47.0",
"v7.46.3",
"v7.46.2",
"v7.46.1",
"v7.46.0",
"v7.45.0",
"v7.44.2",
"v7.44.1",
"v7.44.0",
"v7.43.1",
"v7.43.0",
"v7.42.0",
"v7.41.0",
"v7.40.0",
"v7.39.0",
"v7.38.1",
"v7.38.0",
"v7.37.2",
"v7.37.1",
"v7.37.0",
"v7.36.1",
"v7.36.0",
"v7.35.0",
"v7.34.0",
"v7.33.1",
"v7.33.0",
"v7.32.0",
"v7.31.1",
"v7.31.0",
"v7.30.3",
"v7.30.2",
"v7.30.1",
"v7.30.0",
"v7.29.0",
"v7.28.1",
"v7.28.0",
"v7.27.1",
"v7.27.0",
"v7.26.0",
"v7.25.1",
"v7.25.0",
"v7.24.0",
"v7.23.0",
"v7.22.0",
"v7.21.1",
"v7.21.0",
"v7.20.0",
"v7.19.2",
"v7.19.1",
"v7.19.0",
"v7.18.1",
"v7.18.0",
"v7.17.2",
"v7.17.1",
"v7.17.0",
"v7.16.3",
"v7.16.2",
"v7.16.1",
"v7.16.0",
"v7.15.1",
"v7.15.0",
"v7.14.1",
"v7.14.0",
"v7.13.0",
"v7.12.0",
"v7.11.0",
"v7.10.3",
"v7.10.2",
"v7.10.1",
"v7.10.0",
"v7.9.1",
"v7.9.0",
"v7.8.4",
"v7.8.3",
"v7.8.2",
"v7.8.1",
"v7.8.0",
"v7.7.0",
"v7.6.0",
"v7.5.1",
"v7.5.0",
"v7.4.1",
"v7.4.0",
"v7.3.0",
"v7.2.2",
"v7.2.1",
"v7.2.0",
"v7.1.0",
"v7.0.0",
"v6.51.0",
"v6.50.1",
"v6.50.0",
"v6.49.2",
"v6.49.1",
"v6.49.0",
"v6.48.0",
"v6.47.4",
"v6.47.3",
"v6.47.2",
"v6.47.1",
"v6.47.0",
"v6.46.0",
"v6.45.0",
"v6.44.1",
"v6.44.0",
"v6.43.0",
"v6.42.4",
"v6.42.3",
"v6.42.2",
"v6.42.1",
"v6.42.0",
"v6.41.2",
"v6.41.1",
"v6.41.0",
"v6.40.0",
"v6.39.1",
"v6.39.0",
"v6.38.3",
"v6.38.2",
"v6.38.1",
"v6.38.0",
"v6.37.1",
"v6.37.0",
"v6.36.2",
"v6.36.1",
"v6.36.0",
"v6.35.1",
"v6.35.0",
"v6.34.1",
"v6.34.0",
"v6.33.1",
"v6.33.0",
"v6.32.5",
"v6.32.4",
"v6.32.3",
"v6.32.2",
"v6.32.1",
"v6.32.0",
"v6.31.0",
"v6.30.0",
"v6.29.2",
"v6.29.1",
"v6.29.0",
"v6.28.2",
"v6.28.1",
"v6.28.0",
"v6.27.1",
"v6.27.0",
"v6.26.0",
"v6.25.0",
"v6.24.1",
"v6.24.0",
"v6.23.2",
"v6.23.1",
"v6.23.0",
"v6.22.2",
"v6.22.1",
"v6.22.0",
"v6.21.0",
"v6.20.0",
"v6.19.2",
"v6.19.1",
"v6.19.0",
"v6.18.1",
"v6.18.0",
"v6.17.0",
"v6.16.0",
"v6.15.2",
"v6.15.1",
"v6.15.0",
"v6.14.2",
"v6.14.1",
"v6.14.0",
"v6.13.0",
"v6.12.0",
"v6.11.2",
"v6.11.1",
"v6.11.0",
"v6.10.0",
"v6.9.0",
"v6.8.0",
"v6.7.0",
"v6.6.1",
"v6.6.0",
"v6.5.0",
"v6.4.3",
"v6.4.2",
"v6.4.1",
"v6.4.0",
"v6.3.2",
"v6.3.1",
"v6.3.0",
"v6.2.5",
"v6.2.4",
"v6.2.3",
"v6.2.2",
"v6.2.1",
"v6.2.0",
"v6.1.3",
"v6.1.2",
"v6.1.1",
"v6.1.0",
"v6.0.0",
"v5.19.1",
"v5.19.0",
"v5.18.0",
"v5.17.0",
"v5.16.6",
"v5.16.5",
"v5.16.4",
"v5.16.3",
"v5.16.2",
"v5.16.1",
"v5.16.0",
"v5.15.0",
"v5.14.1",
"v5.14.0",
"v5.13.1",
"v5.13.0",
"v5.12.1",
"v5.12.0",
"v5.11.0",
"v5.10.1",
"v5.10.0",
"v5.9.0",
"v5.8.1",
"v5.8.0",
"v5.7.5",
"v5.7.4",
"v5.7.3",
"v5.7.2",
"v5.7.1",
"v5.7.0",
"v5.6.6",
"v5.6.5",
"v5.6.4",
"v5.6.3",
"v5.6.2",
"v5.6.1",
"v5.6.0",
"v5.5.2",
"v5.5.1",
"v5.5.0",
"v5.4.0",
"v5.3.1",
"v5.3.0",
"v5.2.1",
"v5.2.0",
"v5.1.2",
"v5.1.1",
"v5.1.0",
"v5.0.1",
"v5.0.0",
"v4.3.0",
"v4.2.0",
"v4.1.0",
"v4.0.0",
"v3.181.2",
"v3.181.1",
"v3.181.0",
"v3.180.3",
"v3.180.2",
"v3.180.1",
"v3.180.0",
"v3.179.0",
"v3.178.0",
"v3.177.0",
"v3.176.0",
"v3.175.1",
"v3.175.0",
"v3.174.0",
"v3.173.0",
"v3.172.2",
"v3.172.1",
"v3.172.0",
"v3.171.2",
"v3.171.1",
"v3.171.0",
"v3.170.0",
"v3.169.3",
"v3.169.2",
"v3.169.1",
"v3.169.0",
"v3.168.3",
"v3.168.2",
"v3.168.1",
"v3.168.0",
"v3.167.0",
"v3.166.3",
"v3.166.2",
"v3.166.1",
"v3.166.0",
"v3.165.0",
"v3.164.0",
"v3.163.0",
"v3.162.5",
"v3.162.4",
"v3.162.3",
"v3.162.2",
"v3.162.1",
"v3.162.0",
"v3.161.0",
"v3.160.1",
"v3.160.0",
"v3.159.0",
"v3.158.4",
"v3.158.3",
"v3.158.2",
"v3.158.1",
"v3.158.0",
"v3.157.4",
"v3.157.3",
"v3.157.2",
"v3.157.1",
"v3.157.0",
"v3.156.0",
"v3.155.1",
"v3.155.0",
"v3.154.1",
"v3.154.0",
"v3.153.1",
"v3.153.0",
"v3.152.0",
"v3.151.0",
"v3.150.2",
"v3.150.1",
"v3.150.0",
"v3.149.0",
"v3.148.0",
"v3.147.0",
"v3.146.1",
"v3.146.0",
"v3.145.0",
"v3.144.0",
"v3.143.0",
"v3.142.0",
"v3.141.2",
"v3.141.1",
"v3.141.0",
"v3.140.1",
"v3.140.0",
"v3.139.2",
"v3.139.1",
"v3.139.0",
"v3.138.0",
"v3.137.3",
"v3.137.2",
"v3.137.1",
"v3.137.0",
"v3.136.2",
"v3.136.1",
"v3.136.0",
"v3.135.2",
"v3.135.1",
"v3.135.0",
"v3.134.0",
"v3.133.1",
"v3.133.0",
"v3.132.0",
"v3.131.0",
"v3.130.1",
"v3.130.0",
"v3.129.1",
"v3.129.0",
"v3.128.0",
"v3.127.0",
"v3.126.0",
"v3.125.0",
"v3.124.0",
"v3.123.0",
"v3.122.1",
"v3.122.0",
"v3.121.0",
"v3.120.1",
"v3.120.0",
"v3.119.0",
"v3.118.0",
"v3.117.2",
"v3.117.1",
"v3.117.0",
"v3.116.2",
"v3.116.1",
"v3.116.0",
"v3.115.1",
"v3.115.0",
"v3.114.0",
"v3.113.0",
"v3.112.1",
"v3.112.0",
"v3.111.3",
"v3.111.2",
"v3.111.1",
"v3.111.0",
"v3.110.0",
"v3.109.0",
"v3.108.1",
"v3.108.0",
"v3.107.0",
"v3.106.7",
"v3.106.6",
"v3.106.5",
"v3.106.4",
"v3.106.3",
"v3.106.2",
"v3.106.1",
"v3.106.0",
"v3.105.0",
"v3.104.0",
"v3.103.0",
"v3.102.0",
"v3.101.2",
"v3.101.1",
"v3.101.0",
"v3.100.0",
"v3.99.1",
"v3.99.0",
"v3.98.0",
"v3.97.2",
"v3.97.1",
"v3.97.0",
"v3.96.0",
"v3.95.0",
"v3.94.5",
"v3.94.4",
"v3.94.3",
"v3.94.2",
"v3.94.1",
"v3.94.0",
"v3.93.0",
"v3.92.0",
"v3.91.0",
"v3.90.0",
"v3.89.1",
"v3.89.0",
"v3.88.0",
"v3.87.0",
"v3.86.0",
"v3.85.2",
"v3.85.1",
"v3.85.0",
"v3.84.0",
"v3.83.0",
"v3.82.0",
"v3.81.1",
"v3.81.0",
"v3.80.1",
"v3.80.0",
"v3.79.0",
"v3.78.2",
"v3.78.1",
"v3.78.0",
"v3.77.0",
"v3.76.0",
"v3.75.3",
"v3.75.2",
"v3.75.1",
"v3.75.0",
"v3.74.0",
"v3.73.0",
"v3.72.2",
"v3.72.1",
"v3.72.0",
"v3.71.0",
"v3.70.1",
"v3.70.0",
"v3.69.2",
"v3.69.1",
"v3.69.0",
"v3.68.5",
"v3.68.4",
"v3.68.3",
"v3.68.2",
"v3.68.1",
"v3.68.0",
"v3.67.0",
"v3.66.9",
"v3.66.8",
"v3.66.7",
"v3.66.6",
"v3.66.5",
"v3.66.4",
"v3.66.3",
"v3.66.2",
"v3.66.1",
"v3.66.0",
"v3.65.1",
"v3.65.0",
"v3.64.4",
"v3.64.3",
"v3.64.2",
"v3.64.1",
"v3.64.0",
"v3.63.0",
"v3.62.1",
"v3.62.0",
"v3.61.1",
"v3.61.0",
"v3.60.1",
"v3.60.0",
"v3.59.0",
"v3.58.0",
"v3.57.0",
"v3.56.0",
"v3.55.0",
"v3.54.0",
"v3.53.1",
"v3.53.0",
"v3.52.0",
"v3.51.0",
"v3.50.0",
"v3.49.0",
"v3.48.0",
"v3.47.4",
"v3.47.3",
"v3.47.2",
"v3.47.1",
"v3.47.0",
"v3.46.1",
"v3.46.0",
"v3.45.0",
"v3.44.3",
"v3.44.2",
"v3.44.1",
"v3.44.0",
"v3.43.2",
"v3.43.1",
"v3.43.0",
"v3.42.0",
"v3.41.0",
"v3.40.0",
"v3.39.0",
"v3.38.0",
"v3.37.0",
"v3.36.1",
"v3.36.0",
"v3.35.0",
"v3.34.1",
"v3.34.0",
"v3.33.1",
"v3.33.0",
"v3.32.0",
"v3.31.1",
"v3.31.0",
"v3.30.2",
"v3.30.1",
"v3.30.0",
"v3.29.3",
"v3.29.2",
"v3.29.1",
"v3.29.0",
"v3.28.0",
"v3.27.0",
"v3.26.4",
"v3.26.3",
"v3.26.2",
"v3.26.1",
"v3.26.0",
"v3.25.1",
"v3.24.3",
"v3.24.2",
"v3.24.1",
"v3.24.0",
"v3.23.9",
"v3.23.8",
"v3.23.7",
"v3.23.6",
"v3.23.5",
"v3.23.4",
"v3.23.3",
"v3.23.2",
"v3.23.1",
"v3.23.0",
"v3.22.1",
"v3.22.0",
"v3.21.0",
"v3.20.4",
"v3.20.3",
"v3.20.2",
"v3.20.1",
"v3.20.0",
"v3.19.1",
"v3.19.0",
"v3.18.0",
"v3.17.1",
"v3.17.0",
"v3.16.1",
"v3.16.0",
"v3.15.2",
"v3.15.1",
"v3.15.0",
"v3.14.6",
"v3.14.5",
"v3.14.4",
"v3.14.3",
"v3.14.2",
"v3.14.1",
"v3.14.0",
"v3.13.0",
"v3.12.2",
"v3.12.1",
"v3.12.0",
"v3.11.2",
"v3.11.1",
"v3.11.0",
"v3.10.0",
"v3.9.0",
"v3.8.0",
"v3.7.0",
"v3.6.0",
"v3.5.3",
"v3.5.2",
"v3.5.1",
"v3.5.0",
"v3.4.7",
"v3.4.6",
"v0.4.6",
"v0.4.5",
"v0.4.4",
"v0.4.3",
"v0.4.2",
"v0.4.1",
"v0.4.0",
"v0.3.0",
"v0.2.1",
"v0.2.0",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73505.json"
}
}
],
"modified": "2026-10-28T02:30:32.621554531Z",
"provider": "osv",
"references": [
"https://github.com/JanDeDobbeleer/oh-my-posh/releases/tag/v29.35.1",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73505.json",
"https://github.com/JanDeDobbeleer/oh-my-posh/security/advisories/GHSA-6xj8-qv9j-xcjq",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73505",
"https://github.com/JanDeDobbeleer/oh-my-posh/commit/88ddbe0b0a4dd13cc345996108c9869493f2c690",
"https://github.com/JanDeDobbeleer/oh-my-posh/pull/7711"
],
"provider_metadata": {
"cwe_ids": [
"CWE-1336",
"CWE-94"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73505.json"
}
},
"related_cves": [
{
"value": "CVE-2026-73505",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 499721,
"published_at": "2026-08-13T14:21:57.231+00:00"
}