Browse CVEs

HIGH 8.6 CVE-2026-44465 Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the c… Zed 0.227.1+ Fix from $1,9502026-05-28 HIGH 8.6 CVE-2026-44466 Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing execut… Zed 0.229.0+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-44462 Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowi… Zed 0.229.0+ Fix from $1,9502026-05-28 HIGH 7.8 CVE-2026-44463 Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allow… Zed 0.229.0+ Fix from $1,9502026-05-28 HIGH 8.6 CVE-2026-44461 Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment v… Zed 0.227.1+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-27976 Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar::Archive::unpack`) … Zed 0.224.4+ Fix from $1,9502026-02-26 HIGH 7.1 CVE-2026-27967 Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading… Zed 0.225.9+ Fix from $1,9502026-02-26 HIGH 7.4 CVE-2026-27800 Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4. … Zed 0.224.4+ Fix from $1,9502026-02-26 HIGH 8.0 CVE-2026-25805 Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowance. Furth… Zed 0.219.4+ Fix from $1,9502026-02-10 HIGH 7.3 CVE-2025-68432 Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) … Zed 0.218.2+ Fix from $1,9502025-12-17 HIGH 7.3 CVE-2025-68433 Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) co… Zed 0.218.2+ Fix from $1,9502025-12-17