{"id":"CVE-2026-55693","aliases":["ALSA-2026:47982","ALSA-2026:48650","ALSA-2026:48703","AZL-91107","BELL-CVE-2026-55693","CLSA-2026-1782809724","CLSA-2026-1782810138","CLSA-2026-1782810500","CLSA-2026-1782810569","CLSA-2026-1782826872","CLSA-2026-1782896270","CLSA-2026-1782897357","CLSA-2026-1782897593","CLSA-2026-1782999239","CLSA-2026-1783693204","CLSA-2026-1783852950","CLSA-2026-1787394930","DEBIAN-CVE-2026-55693","EUVD-2026-39452","GHSA-wgh4-64f7-q3jq","MGASA-2026-0240","OESA-2026-2862","OESA-2026-2904","OESA-2026-2905","OESA-2026-2906","RHSA-2026:30267","RHSA-2026:47982","RHSA-2026:48650","RHSA-2026:48703","RHSA-2026:55431","RHSA-2026:68711","RHSA-2026:69128","RHSA-2026:70818","RHSA-2026:72465","RHSA-2026:72466","RLSA-2026:47982","RLSA-2026:48650","RLSA-2026:48703","ROOT-OS-DEBIAN-11-CVE-2026-55693","ROOT-OS-DEBIAN-12-CVE-2026-55693","UBUNTU-CVE-2026-55693","USN-8500-1"],"status":"published","title":"Vim: Out-of-bounds Write in Spell File Word Count","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","severity":{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00124,"percentile":0.02167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-06-25T15:34:33Z","modified":"2026-11-01T19:00:43Z","fixes":[{"ecosystem":"Azure Linux:3","package":"vim","fixed_in":["9.2.0735-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"vim","fixed_in":["9.2.0747-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"vim","fixed_in":["9.2.0747-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"vim","fixed_in":["9.2.0663-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.1.1230-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.2.0782-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"vim","fixed_in":["2:8.2.2434-3+deb11u3.aikido.5","2:8.2.2434-3+deb11u3.aikido.6","2:8.2.2434-3+deb11u3.aikido.7","2:8.2.2434-3+deb11u3.root.io.2","2:8.2.2434-3+deb11u3.root.io.4","2:8.2.2434-3+deb11u3.root.io.3","2:8.2.2434-3+deb11u3.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-vim","fixed_in":["2:8.2.2434-3+deb11u3.aikido.5","2:8.2.2434-3+deb11u3.aikido.6","2:8.2.2434-3+deb11u3.aikido.7","2:8.2.2434-3+deb11u3.root.io.2","2:8.2.2434-3+deb11u3.root.io.4","2:8.2.2434-3+deb11u3.root.io.3","2:8.2.2434-3+deb11u3.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"vim","fixed_in":["2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.root.io.19","2:9.0.1378-2+deb12u2.root.io.18","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-vim","fixed_in":["2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.root.io.19","2:9.0.1378-2+deb12u2.root.io.18","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm30"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm36"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.13+esm21"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.32+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.33"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"vim","fixed_in":["2:9.1.0016-1ubuntu7.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"vim","fixed_in":["2:9.1.0967-1ubuntu6.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"vim","fixed_in":["2:9.1.2141-1ubuntu4.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0735-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0820-r2"},{"fixed":"9.2.0747-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.1415-r0"},{"fixed":"9.2.0747-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.1395-r0"},{"fixed":"9.2.0663-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els21"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els70"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els57"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els22"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:9.0.1378-2","2:9.0.1378-2+deb12u1","2:9.0.1378-2+deb12u2","2:9.0.1658-1","2:9.0.1672-1","2:9.0.1894-1","2:9.0.2018-1","2:9.0.2087-1","2:9.0.2103-1","2:9.0.2116-1","2:9.0.2189-1","2:9.1.0-1","2:9.1.0016-1","2:9.1.0199-1","2:9.1.0374-1","2:9.1.0377-1","2:9.1.0496-1","2:9.1.0698-1","2:9.1.0709-1","2:9.1.0709-2","2:9.1.0777-1","2:9.1.0861-1","2:9.1.0967-1","2:9.1.0967-2","2:9.1.1113-1","2:9.1.1230-1","2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1","2:9.2.0782-1","2:9.2.0858-1"]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.1230-2+deb13u1"}]}],"versions":["2:9.1.1230-2"]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.2.0782-1"}]}],"versions":["2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.782-1.mga10"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.782-1.mga9"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-51.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-37.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-51.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-37.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-default-editor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.725-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-5.el10_0.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-5.el10_0.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-5.el10_0.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-5.el10_0.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.el7_9.2"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.el7_9.2"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.el7_9.2"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.el7_9.2"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.el7_9.2"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-5.el6_10.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-5.el6_10.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-5.el6_10.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-5.el6_10.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-5.el6_10.4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_4.4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-20.el9_2.3"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-31.el8_10"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Debian:11","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.5"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.6"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.7"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.2"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.4"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.3"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.5"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.6"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.7"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.2"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.4"},{"fixed":"2:8.2.2434-3+deb11u3.root.io.3"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.19"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.18"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.19"},{"fixed":"2:9.0.1378-2+deb12u2.root.io.18"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm30"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16","2:7.4.052-1ubuntu3.1+esm17","2:7.4.052-1ubuntu3.1+esm18","2:7.4.052-1ubuntu3.1+esm19","2:7.4.052-1ubuntu3.1+esm20","2:7.4.052-1ubuntu3.1+esm21","2:7.4.052-1ubuntu3.1+esm22","2:7.4.052-1ubuntu3.1+esm23","2:7.4.052-1ubuntu3.1+esm24","2:7.4.052-1ubuntu3.1+esm25","2:7.4.052-1ubuntu3.1+esm26","2:7.4.052-1ubuntu3.1+esm27","2:7.4.052-1ubuntu3.1+esm28","2:7.4.052-1ubuntu3.1+esm29"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm36"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12","2:7.4.1689-3ubuntu1.5+esm13","2:7.4.1689-3ubuntu1.5+esm14","2:7.4.1689-3ubuntu1.5+esm15","2:7.4.1689-3ubuntu1.5+esm17","2:7.4.1689-3ubuntu1.5+esm18","2:7.4.1689-3ubuntu1.5+esm19","2:7.4.1689-3ubuntu1.5+esm20","2:7.4.1689-3ubuntu1.5+esm22","2:7.4.1689-3ubuntu1.5+esm23","2:7.4.1689-3ubuntu1.5+esm24","2:7.4.1689-3ubuntu1.5+esm25","2:7.4.1689-3ubuntu1.5+esm26","2:7.4.1689-3ubuntu1.5+esm27","2:7.4.1689-3ubuntu1.5+esm28","2:7.4.1689-3ubuntu1.5+esm29","2:7.4.1689-3ubuntu1.5+esm30","2:7.4.1689-3ubuntu1.5+esm31","2:7.4.1689-3ubuntu1.5+esm32","2:7.4.1689-3ubuntu1.5+esm33","2:7.4.1689-3ubuntu1.5+esm34","2:7.4.1689-3ubuntu1.5+esm35"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+esm21"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11","2:8.0.1453-1ubuntu1.12","2:8.0.1453-1ubuntu1.13","2:8.0.1453-1ubuntu1.13+esm1","2:8.0.1453-1ubuntu1.13+esm3","2:8.0.1453-1ubuntu1.13+esm4","2:8.0.1453-1ubuntu1.13+esm5","2:8.0.1453-1ubuntu1.13+esm6","2:8.0.1453-1ubuntu1.13+esm7","2:8.0.1453-1ubuntu1.13+esm8","2:8.0.1453-1ubuntu1.13+esm9","2:8.0.1453-1ubuntu1.13+esm10","2:8.0.1453-1ubuntu1.13+esm11","2:8.0.1453-1ubuntu1.13+esm12","2:8.0.1453-1ubuntu1.13+esm13","2:8.0.1453-1ubuntu1.13+esm14","2:8.0.1453-1ubuntu1.13+esm15","2:8.0.1453-1ubuntu1.13+esm16","2:8.0.1453-1ubuntu1.13+esm17","2:8.0.1453-1ubuntu1.13+esm18","2:8.0.1453-1ubuntu1.13+esm19","2:8.0.1453-1ubuntu1.13+esm20"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.32+esm9"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12","2:8.1.2269-1ubuntu5.13","2:8.1.2269-1ubuntu5.14","2:8.1.2269-1ubuntu5.15","2:8.1.2269-1ubuntu5.16","2:8.1.2269-1ubuntu5.17","2:8.1.2269-1ubuntu5.18","2:8.1.2269-1ubuntu5.20","2:8.1.2269-1ubuntu5.21","2:8.1.2269-1ubuntu5.22","2:8.1.2269-1ubuntu5.23","2:8.1.2269-1ubuntu5.24","2:8.1.2269-1ubuntu5.25","2:8.1.2269-1ubuntu5.26","2:8.1.2269-1ubuntu5.29","2:8.1.2269-1ubuntu5.30","2:8.1.2269-1ubuntu5.31","2:8.1.2269-1ubuntu5.32","2:8.1.2269-1ubuntu5.32+esm2","2:8.1.2269-1ubuntu5.32+esm3","2:8.1.2269-1ubuntu5.32+esm4","2:8.1.2269-1ubuntu5.32+esm5","2:8.1.2269-1ubuntu5.32+esm6","2:8.1.2269-1ubuntu5.32+esm7","2:8.1.2269-1ubuntu5.32+esm8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.33"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13","2:8.2.3995-1ubuntu2.15","2:8.2.3995-1ubuntu2.16","2:8.2.3995-1ubuntu2.17","2:8.2.3995-1ubuntu2.18","2:8.2.3995-1ubuntu2.19","2:8.2.3995-1ubuntu2.20","2:8.2.3995-1ubuntu2.21","2:8.2.3995-1ubuntu2.22","2:8.2.3995-1ubuntu2.23","2:8.2.3995-1ubuntu2.24","2:8.2.3995-1ubuntu2.26","2:8.2.3995-1ubuntu2.27","2:8.2.3995-1ubuntu2.28","2:8.2.3995-1ubuntu2.29","2:8.2.3995-1ubuntu2.30","2:8.2.3995-1ubuntu2.31","2:8.2.3995-1ubuntu2.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0016-1ubuntu7.17"}]}],"versions":["2:9.0.1672-1ubuntu2","2:9.0.2087-1ubuntu1","2:9.0.2116-1ubuntu1","2:9.0.2116-1ubuntu2","2:9.0.2184-0ubuntu1","2:9.0.2189-1ubuntu1","2:9.1.0-1ubuntu1","2:9.1.0016-1ubuntu2","2:9.1.0016-1ubuntu6","2:9.1.0016-1ubuntu7","2:9.1.0016-1ubuntu7.1","2:9.1.0016-1ubuntu7.2","2:9.1.0016-1ubuntu7.3","2:9.1.0016-1ubuntu7.4","2:9.1.0016-1ubuntu7.5","2:9.1.0016-1ubuntu7.6","2:9.1.0016-1ubuntu7.7","2:9.1.0016-1ubuntu7.8","2:9.1.0016-1ubuntu7.9","2:9.1.0016-1ubuntu7.10","2:9.1.0016-1ubuntu7.11","2:9.1.0016-1ubuntu7.12","2:9.1.0016-1ubuntu7.13","2:9.1.0016-1ubuntu7.14","2:9.1.0016-1ubuntu7.15","2:9.1.0016-1ubuntu7.16"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0967-1ubuntu6.8"}]}],"versions":["2:9.1.0967-1ubuntu4","2:9.1.0967-1ubuntu5","2:9.1.0967-1ubuntu6","2:9.1.0967-1ubuntu6.1","2:9.1.0967-1ubuntu6.2","2:9.1.0967-1ubuntu6.3","2:9.1.0967-1ubuntu6.4","2:9.1.0967-1ubuntu6.5","2:9.1.0967-1ubuntu6.6","2:9.1.0967-1ubuntu6.7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.2141-1ubuntu4.6"}]}],"versions":["2:9.1.0967-1ubuntu6","2:9.1.1882-1ubuntu1","2:9.1.1882-1ubuntu2","2:9.1.2141-1ubuntu1","2:9.1.2141-1ubuntu2","2:9.1.2141-1ubuntu4","2:9.1.2141-1ubuntu4.1","2:9.1.2141-1ubuntu4.2","2:9.1.2141-1ubuntu4.3","2:9.1.2141-1ubuntu4.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm30"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16","2:7.4.052-1ubuntu3.1+esm17","2:7.4.052-1ubuntu3.1+esm18","2:7.4.052-1ubuntu3.1+esm19","2:7.4.052-1ubuntu3.1+esm20","2:7.4.052-1ubuntu3.1+esm21","2:7.4.052-1ubuntu3.1+esm22","2:7.4.052-1ubuntu3.1+esm23","2:7.4.052-1ubuntu3.1+esm24","2:7.4.052-1ubuntu3.1+esm25","2:7.4.052-1ubuntu3.1+esm26","2:7.4.052-1ubuntu3.1+esm27","2:7.4.052-1ubuntu3.1+esm28","2:7.4.052-1ubuntu3.1+esm29"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm36"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12","2:7.4.1689-3ubuntu1.5+esm13","2:7.4.1689-3ubuntu1.5+esm14","2:7.4.1689-3ubuntu1.5+esm15","2:7.4.1689-3ubuntu1.5+esm17","2:7.4.1689-3ubuntu1.5+esm18","2:7.4.1689-3ubuntu1.5+esm19","2:7.4.1689-3ubuntu1.5+esm20","2:7.4.1689-3ubuntu1.5+esm22","2:7.4.1689-3ubuntu1.5+esm23","2:7.4.1689-3ubuntu1.5+esm24","2:7.4.1689-3ubuntu1.5+esm25","2:7.4.1689-3ubuntu1.5+esm26","2:7.4.1689-3ubuntu1.5+esm27","2:7.4.1689-3ubuntu1.5+esm28","2:7.4.1689-3ubuntu1.5+esm29","2:7.4.1689-3ubuntu1.5+esm30","2:7.4.1689-3ubuntu1.5+esm31","2:7.4.1689-3ubuntu1.5+esm32","2:7.4.1689-3ubuntu1.5+esm33","2:7.4.1689-3ubuntu1.5+esm34","2:7.4.1689-3ubuntu1.5+esm35"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+esm21"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11","2:8.0.1453-1ubuntu1.12","2:8.0.1453-1ubuntu1.13","2:8.0.1453-1ubuntu1.13+esm1","2:8.0.1453-1ubuntu1.13+esm3","2:8.0.1453-1ubuntu1.13+esm4","2:8.0.1453-1ubuntu1.13+esm5","2:8.0.1453-1ubuntu1.13+esm6","2:8.0.1453-1ubuntu1.13+esm7","2:8.0.1453-1ubuntu1.13+esm8","2:8.0.1453-1ubuntu1.13+esm9","2:8.0.1453-1ubuntu1.13+esm10","2:8.0.1453-1ubuntu1.13+esm11","2:8.0.1453-1ubuntu1.13+esm12","2:8.0.1453-1ubuntu1.13+esm13","2:8.0.1453-1ubuntu1.13+esm14","2:8.0.1453-1ubuntu1.13+esm15","2:8.0.1453-1ubuntu1.13+esm16","2:8.0.1453-1ubuntu1.13+esm17","2:8.0.1453-1ubuntu1.13+esm18","2:8.0.1453-1ubuntu1.13+esm19","2:8.0.1453-1ubuntu1.13+esm20"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.32+esm9"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12","2:8.1.2269-1ubuntu5.13","2:8.1.2269-1ubuntu5.14","2:8.1.2269-1ubuntu5.15","2:8.1.2269-1ubuntu5.16","2:8.1.2269-1ubuntu5.17","2:8.1.2269-1ubuntu5.18","2:8.1.2269-1ubuntu5.20","2:8.1.2269-1ubuntu5.21","2:8.1.2269-1ubuntu5.22","2:8.1.2269-1ubuntu5.23","2:8.1.2269-1ubuntu5.24","2:8.1.2269-1ubuntu5.25","2:8.1.2269-1ubuntu5.26","2:8.1.2269-1ubuntu5.29","2:8.1.2269-1ubuntu5.30","2:8.1.2269-1ubuntu5.31","2:8.1.2269-1ubuntu5.32","2:8.1.2269-1ubuntu5.32+esm2","2:8.1.2269-1ubuntu5.32+esm3","2:8.1.2269-1ubuntu5.32+esm4","2:8.1.2269-1ubuntu5.32+esm5","2:8.1.2269-1ubuntu5.32+esm6","2:8.1.2269-1ubuntu5.32+esm7","2:8.1.2269-1ubuntu5.32+esm8"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.33"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13","2:8.2.3995-1ubuntu2.15","2:8.2.3995-1ubuntu2.16","2:8.2.3995-1ubuntu2.17","2:8.2.3995-1ubuntu2.18","2:8.2.3995-1ubuntu2.19","2:8.2.3995-1ubuntu2.20","2:8.2.3995-1ubuntu2.21","2:8.2.3995-1ubuntu2.22","2:8.2.3995-1ubuntu2.23","2:8.2.3995-1ubuntu2.24","2:8.2.3995-1ubuntu2.26","2:8.2.3995-1ubuntu2.27","2:8.2.3995-1ubuntu2.28","2:8.2.3995-1ubuntu2.29","2:8.2.3995-1ubuntu2.30","2:8.2.3995-1ubuntu2.31","2:8.2.3995-1ubuntu2.32"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0016-1ubuntu7.17"}]}],"versions":["2:9.0.1672-1ubuntu2","2:9.0.2087-1ubuntu1","2:9.0.2116-1ubuntu1","2:9.0.2116-1ubuntu2","2:9.0.2184-0ubuntu1","2:9.0.2189-1ubuntu1","2:9.1.0-1ubuntu1","2:9.1.0016-1ubuntu2","2:9.1.0016-1ubuntu6","2:9.1.0016-1ubuntu7","2:9.1.0016-1ubuntu7.1","2:9.1.0016-1ubuntu7.2","2:9.1.0016-1ubuntu7.3","2:9.1.0016-1ubuntu7.4","2:9.1.0016-1ubuntu7.5","2:9.1.0016-1ubuntu7.6","2:9.1.0016-1ubuntu7.7","2:9.1.0016-1ubuntu7.8","2:9.1.0016-1ubuntu7.9","2:9.1.0016-1ubuntu7.10","2:9.1.0016-1ubuntu7.11","2:9.1.0016-1ubuntu7.12","2:9.1.0016-1ubuntu7.13","2:9.1.0016-1ubuntu7.14","2:9.1.0016-1ubuntu7.15","2:9.1.0016-1ubuntu7.16"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0967-1ubuntu6.8"}]}],"versions":["2:9.1.0967-1ubuntu4","2:9.1.0967-1ubuntu5","2:9.1.0967-1ubuntu6","2:9.1.0967-1ubuntu6.1","2:9.1.0967-1ubuntu6.2","2:9.1.0967-1ubuntu6.3","2:9.1.0967-1ubuntu6.4","2:9.1.0967-1ubuntu6.5","2:9.1.0967-1ubuntu6.6","2:9.1.0967-1ubuntu6.7"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.2141-1ubuntu4.6"}]}],"versions":["2:9.1.0967-1ubuntu6","2:9.1.1882-1ubuntu1","2:9.1.1882-1ubuntu2","2:9.1.2141-1ubuntu1","2:9.1.2141-1ubuntu2","2:9.1.2141-1ubuntu4","2:9.1.2141-1ubuntu4.1","2:9.1.2141-1ubuntu4.2","2:9.1.2141-1ubuntu4.3","2:9.1.2141-1ubuntu4.5"],"bundled":8}],"products":[{"vendor":"vim","product":"vim"}],"references":[{"url":"https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7","tags":["x_refsource_MISC","Patch","fix","article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0653","tags":["x_refsource_MISC","Product","web","article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47982","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55693","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57455","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57456","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59856","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59858","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492968","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492972","tags":["report"]},{"url":"https://bugzilla.redhat.com/2492980","tags":["report"]},{"url":"https://bugzilla.redhat.com/2498867","tags":["report"]},{"url":"https://bugzilla.redhat.com/2498868","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-47982.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48650","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-48650.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:48703","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-48703.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55693","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-55693","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1782809724.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57456","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1782810138.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1782810500.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1782810569.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782826872.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1782896270.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1782897357.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1782897593.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782999239.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1783693204.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1783852950.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787394930.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59858","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55693.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-55693","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0240.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35580","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/22/13","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-3h95-3962-mmvf","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/29/5","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c","tags":["advisory","article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/30/4","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/04/14","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/15/8","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/16/12","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/16/13","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/17/10","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/18/7","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486","tags":["advisory","article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/20/2","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/20/3","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/21/1","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4","tags":["advisory","article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/21/2","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3","tags":["advisory","article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/24/9","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/27/6","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x","tags":["advisory","article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/28/1","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97","tags":["advisory","article"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2862","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2904","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2905","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2906","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30267","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57452","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30267.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55693","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57452","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0671","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492968","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57455","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0698","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498868","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47982.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57456","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0699","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59856","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59858","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48650.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48703.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55431","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487996","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55431.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47162","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0495","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47167","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0496","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52858","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0561","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68711","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514058","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68711.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34982","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34982","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/01/1","tags":["article"]},{"url":"https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0276","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35177","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41411","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41411","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41411","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0357","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46483","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0479","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73072","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0846","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73076","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73078","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69128","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2443455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2443474","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69128.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28417","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/79348dbbc09332130f4c860","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0073","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-28421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-28421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28421","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/65c1a143c331c886dc28","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0077","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70818","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514065","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70818.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73077","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72465","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72465.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72466","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72466.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47982","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:48650","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:48703","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-55693","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8500-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-35177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-55892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-55895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-57452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-57453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-57455","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-57456","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-55693","title":"Vim: Out-of-bounds Write in Spell File Word Count","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T15:34:33.424Z","modified":"2026-06-26T14:03:18.357Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:20:11.925815Z"}],"euvd":[{"id":"EUVD-2026-39452","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T15:34:33Z","modified":"2026-06-26T14:03:18Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"}],"updated_at":"2026-11-02T18:20:24.495602Z"}],"nvd":[{"id":"CVE-2026-55693","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T16:16:40.22Z","modified":"2026-06-26T14:17:05.597Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:26.045561Z"}],"osv":[{"id":"BELL-CVE-2026-55693","status":"published","published":"2026-06-27T06:13:05.764077Z","modified":"2026-08-26T07:15:11.175409775Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:24.657778Z"},{"id":"CVE-2026-55693","title":"Vim: Out-of-bounds Write in Spell File Word Count","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T15:34:33.424Z","modified":"2026-10-28T11:17:55.511589209Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:45:11.22012Z"},{"id":"DEBIAN-CVE-2026-55693","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T16:16:40.22Z","modified":"2026-11-01T19:00:43.249060331Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"OESA-2026-2862","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.(CVE-2026-55693)\n\nVim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (prefix[], arridx[], curi[]). A crafted .spl file, loaded when the user dumps the word list, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0662.(CVE-2026-55892)\n\nVim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer\u0026apos;s directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!.  This vulnerability is fixed in 9.2.0663.(CVE-2026-55895)","status":"published","published":"2026-07-06T11:11:46Z","modified":"2026-08-18T01:21:14.247845368Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2904","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.(CVE-2026-55693)\n\nVim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (prefix[], arridx[], curi[]). A crafted .spl file, loaded when the user dumps the word list, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0662.(CVE-2026-55892)\n\nVim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer\u0026apos;s directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!.  This vulnerability is fixed in 9.2.0663.(CVE-2026-55895)","status":"published","published":"2026-07-09T11:11:48Z","modified":"2026-08-18T01:21:15.653731718Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2905","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.(CVE-2026-55693)\n\nVim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (prefix[], arridx[], curi[]). A crafted .spl file, loaded when the user dumps the word list, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0662.(CVE-2026-55892)\n\nVim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer\u0026apos;s directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!.  This vulnerability is fixed in 9.2.0663.(CVE-2026-55895)","status":"published","published":"2026-07-09T11:11:48Z","modified":"2026-08-18T01:21:15.661463129Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2906","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.(CVE-2026-55693)\n\nVim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (prefix[], arridx[], curi[]). A crafted .spl file, loaded when the user dumps the word list, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0662.(CVE-2026-55892)\n\nVim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer\u0026apos;s directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!.  This vulnerability is fixed in 9.2.0663.(CVE-2026-55895)","status":"published","published":"2026-07-09T11:11:49Z","modified":"2026-08-18T01:21:15.606097276Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:30267","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-02T10:16:35Z","modified":"2026-10-14T10:17:15Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:47982","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-07-30T10:17:56Z","modified":"2026-10-14T10:21:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48650","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-08-01T10:11:00Z","modified":"2026-10-14T10:21:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:48703","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-08-01T10:11:00Z","modified":"2026-10-14T10:21:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:55431","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-08-17T10:16:54Z","modified":"2026-10-14T10:23:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:68711","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-09-18T10:15:36Z","modified":"2026-10-14T10:28:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69128","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-09-21T10:14:55Z","modified":"2026-10-17T10:18:48Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70818","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-09-24T10:15:09Z","modified":"2026-10-14T10:28:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:72465","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-09-29T10:18:22Z","modified":"2026-10-14T10:29:23Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:72466","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-09-29T10:18:22Z","modified":"2026-10-14T10:29:24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:47982","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n\n* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n\n* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n\n* vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-30T12:03:58.794288Z","modified":"2026-07-30T12:30:06.781405963Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:48650","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n\n* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n\n* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n\n* vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-01T00:06:21.082706Z","modified":"2026-08-01T00:30:05.666384744Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:48703","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n\n* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n\n* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-31T18:00:46.659099Z","modified":"2026-07-31T18:25:52.455203442Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-55693","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T16:16:00Z","modified":"2026-07-02T22:49:56.671401551Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","level":"medium"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"ALSA-2026:47982","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n  * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n  * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n  * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-10-29T11:32:22.376087759Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:48650","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n  * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n  * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n  * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-30T00:00:00Z","modified":"2026-10-29T11:30:33.398942855Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:48703","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n  * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n  * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-30T00:00:00Z","modified":"2026-10-29T11:02:24.609150024Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-91107","title":"CVE-2026-55693 affecting package vim for versions less than 9.2.0735-1","description":"Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.","status":"published","published":"2026-06-25T16:16:40Z","modified":"2026-08-28T17:56:40.856021Z","updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"CLSA-2026-1782809724","title":"vim: Fix of 4 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-55892: fix out-of-bounds write in dump_prefixes()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()\n- CVE-2026-57456: fix code execution in Python omni-completion","status":"published","published":"2026-06-30T08:55:45Z","modified":"2026-10-26T09:31:50.119304524Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782810138","title":"vim: Fix of 4 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-55892: fix out-of-bounds write in dump_prefixes()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()\n- CVE-2026-57456: fix code execution in Python omni-completion","status":"published","published":"2026-06-30T09:02:39Z","modified":"2026-10-26T09:31:44.818448275Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782810500","title":"vim: Fix of 4 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-55892: fix out-of-bounds write in dump_prefixes()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()\n- CVE-2026-57456: fix code execution in Python omni-completion","status":"published","published":"2026-06-30T09:08:42Z","modified":"2026-10-26T09:31:37.649541132Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782810569","title":"Fix CVE(s): CVE-2026-55693, CVE-2026-55892, CVE-2026-57455, CVE-2026-57456","description":"   * SECURITY UPDATE: out-of-bounds write parsing a crafted spell file:\n     tree_count_words() and sug_filltree() descended the word trie without\n     bounding the recursion depth, so a deeply nested trie wrote past the\n     ends of their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.\n     - debian/patches/CVE-2026-55693.patch: only descend while\n       depth \u003c MAXWLEN - 1 in both trie walkers, in src/spell.c; matches\n       upstream patch 9.2.0653.\n     - CVE-2026-55693\n   * SECURITY UPDATE: stack out-of-bounds write in dump_prefixes() when\n     dumping spell prefixes (:spelldump): the word trie was descended\n     without bounding the recursion depth, overflowing the MAXWLEN-sized\n     prefix[], arridx[] and curi[] arrays.\n     - debian/patches/CVE-2026-55892.patch: only descend while\n       depth \u003c MAXWLEN - 1, in src/spell.c; matches upstream patch\n       9.2.0662.\n     - CVE-2026-55892\n   * SECURITY UPDATE: out-of-bounds write in soundfold(): the single-byte\n     branch of spell_soundfold_sofo() wrote one result byte per input byte\n     into the MAXWLEN-sized res[] buffer with no bound, so a long word\n     overflowed it.\n     - debian/patches/CVE-2026-57455.patch: stop the translation loop once\n       ri reaches MAXWLEN - 1, in src/spell.c; matches upstream patch\n       9.2.0698.\n     - CVE-2026-57455\n   * SECURITY UPDATE: arbitrary code execution in the python and python3\n     omni-completion plugins: reconstructed class/function definitions ran\n     through exec() embedded buffer-supplied docstrings inside a triple-\n     quoted Python string literal, so a docstring containing a closing\n     triple-quote broke out of the literal and executed attacker code.\n     - debian/patches/CVE-2026-57456.patch: quote docstrings with repr()\n       instead of triple-quoting, in runtime/autoload/python3complete.vim\n       and pythoncomplete.vim; matches upstream patch 9.2.0699.\n     - CVE-2026-57456","status":"published","published":"2026-06-30T09:09:52Z","modified":"2026-10-26T09:31:47.004921178Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782826872","title":"vim: Fix of 4 CVEs","description":"- CVE-2026-55693: bound the trie-descent depth counter against the\n  MAXWLEN-element stack arrays in tree_count_words() to prevent an\n  out-of-bounds write when reading a crafted spell file\n  (src/spellfile.c, upstream vim 9.2.0653)\n- CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes()\n  to prevent a stack out-of-bounds write with a crafted .spl spell file\n  (src/spell.c, upstream vim 9.2.0662)\n- CVE-2026-57455: bound the single-byte SOFO result copy in\n  spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds\n  write when sound-folding long words (src/spell.c, upstream vim 9.2.0698)\n- CVE-2026-57456: use repr() on reconstructed docstrings in the python3\n  omni-completion so a hostile buffer cannot break out of the\n  triple-quoted literal and execute arbitrary Python during completion\n  (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)","status":"published","published":"2026-06-30T13:41:33Z","modified":"2026-10-26T09:31:13.625988398Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782896270","title":"Fix CVE(s): CVE-2026-55693, CVE-2026-57455, CVE-2026-57456","description":"   * SECURITY UPDATE: Out-of-bounds write in tree_count_words() in src/spellfile.c when a crafted .spl/.sug spell-file pair loaded during spell suggestion drives the word-trie descent past the end of the MAXWLEN-sized arridx, curi and wordcount stack arrays\n     - debian/patches/CVE-2026-55693.patch: bound the descent in tree_count_words() and sug_filltree() with depth \u003c MAXWLEN - 1, matching the sibling trie walkers, so the depth index can no longer run past the fixed MAXWLEN-sized arrays\n     - CVE-2026-55693\n   * SECURITY UPDATE: Out-of-bounds write in spell_soundfold_sofo() in src/spell.c when a word longer than MAXWLEN is sound-folded through a spell file's SOFO byte map while a SOFO-based spell language is active, writing past the end of the caller's MAXWLEN-sized result buffer\n     - debian/patches/CVE-2026-57455.patch: bound the single-byte SOFO translation loop in spell_soundfold_sofo() with ri \u003c MAXWLEN - 1 so the output index can no longer run past the fixed MAXWLEN-sized result buffer\n     - CVE-2026-57455\n   * SECURITY UPDATE: Code execution via Python omni-completion inserting buffer-derived docstrings verbatim between triple quotes in the reconstructed source run through exec(), letting a crafted docstring break out of the triple-quoted literal and execute attacker-controlled code\n     - debian/patches/CVE-2026-57456.patch: use repr() to quote docstrings in the Scope, Class, and Function get_code() methods of python3complete and pythoncomplete so docstring text can no longer break out of the generated string literal\n     - CVE-2026-57456","status":"published","published":"2026-07-01T08:58:09Z","modified":"2026-10-26T09:31:52.116861802Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782897357","title":"vim: Fix of 2 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()","status":"published","published":"2026-07-01T09:16:15Z","modified":"2026-10-26T09:31:54.504526503Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782897593","title":"vim: Fix of 2 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()","status":"published","published":"2026-07-01T09:20:11Z","modified":"2026-10-26T09:31:45.5696964Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782999239","title":"vim: Fix of 4 CVEs","description":"- CVE-2026-55693: bound the trie-descent depth counter against the\n  MAXWLEN-element stack arrays in tree_count_words() to prevent an\n  out-of-bounds write when reading a crafted spell file\n  (src/spellfile.c, upstream vim 9.2.0653)\n- CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes()\n  to prevent a stack out-of-bounds write with a crafted .spl spell file\n  (src/spell.c, upstream vim 9.2.0662)\n- CVE-2026-57455: bound the single-byte SOFO result copy in\n  spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds\n  write when sound-folding long words (src/spell.c, upstream vim 9.2.0698)\n- CVE-2026-57456: use repr() on reconstructed docstrings in the python3\n  omni-completion so a hostile buffer cannot break out of the\n  triple-quoted literal and execute arbitrary Python during completion\n  (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)","status":"published","published":"2026-07-02T13:34:20Z","modified":"2026-10-26T09:30:10.691088178Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783693204","title":"vim: Fix of 2 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()","status":"published","published":"2026-07-12T10:44:41Z","modified":"2026-10-26T09:31:39.368773251Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1783852950","title":"vim: Fix of 2 CVEs","description":"- CVE-2026-55693: fix out-of-bounds write in tree_count_words()\n- CVE-2026-57455: fix out-of-bounds write in soundfold()","status":"published","published":"2026-07-12T10:42:47Z","modified":"2026-10-26T09:31:42.301250678Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1787394930","title":"Fix of 10 CVEs","description":"   * SECURITY UPDATE: command injection in the tar plugin: tar#Vimuntar()\n     escaped the tarball name with shellescape() without the special\n     argument before running gunzip/gzip through :!, so characters that Vim\n     expands in a :! command line (such as % and #) survived in the name\n     and let a crafted archive name run arbitrary shell commands.\n     - debian/patches/CVE-2026-46483.patch: use the shellescape(name, 1)\n       form for both :! invocations in runtime/autoload/tar.vim; matches\n       upstream patch 9.2.0479.\n     - CVE-2026-46483\n   * SECURITY UPDATE: code injection via netrw directory history:\n     s:NetrwBookHistSave() serialised each history entry into\n     ~/.vim/.netrwhist by wrapping the value in single quotes with string\n     concatenation, so a directory name containing a single quote closed\n     the literal and injected Vimscript that ran when the history file was\n     sourced on the next netrw start.\n     - debian/patches/CVE-2026-47162.patch: encode the value with string()\n       in runtime/autoload/netrw.vim; matches upstream patch 9.2.0495.\n     - CVE-2026-47162\n   * SECURITY UPDATE: code execution through Python omni-completion:\n     pythoncomplete and python3complete rebuilt the buffer's Python code\n     and passed it to exec(), including the import and from statements\n     harvested from the buffer, so invoking omni-completion in a hostile\n     Python file executed arbitrary module-level code.\n     - debian/patches/CVE-2026-52858.patch: skip import/from statements\n       unless g:pythoncomplete_allow_import is set, in both\n       runtime/autoload/pythoncomplete.vim and python3complete.vim;\n       matches upstream patches 9.2.0561 and 9.2.0568, the latter being\n       required for the opt-in to take effect at all.\n     - CVE-2026-52858\n   * SECURITY UPDATE: out-of-bounds access when a terminal buffer is\n     snapshotted: the per-cell loop in move_terminal_to_buffer() walked\n     cell.chars[] with no upper bound, and libvterm leaves that array\n     unterminated when a cell uses all VTERM_MAX_CHARS_PER_CELL slots (a\n     base character plus five combining marks), so it read past the array\n     and appended the out-of-bounds values to a buffer sized for far fewer\n     bytes.\n     - debian/patches/CVE-2026-52859.patch: bound the loop with\n       i \u003c VTERM_MAX_CHARS_PER_CELL and size the buffer for six 6-byte\n       characters, in src/terminal.c; matches upstream patch 9.2.0565\n       together with its prerequisite 8.1.0611, without which the bounded\n       loop would still overrun the MB_MAXBYTES-sized buffer.\n     - CVE-2026-52859\n   * SECURITY UPDATE: code execution through Python omni-completion\n     definition headers: Scope.get_code() reproduced def and class headers\n     verbatim in the source handed to exec(), and Python evaluates\n     parameter default values, annotations and base-class expressions at\n     definition time, so crafted headers ran arbitrary code during\n     completion even with imports disabled.\n     - debian/patches/CVE-2026-52860.patch: strip default values and\n       annotations from parameters and accept only dotted names as base\n       classes, in both runtime/autoload/pythoncomplete.vim and\n       python3complete.vim; matches upstream patch 9.2.0597.\n     - CVE-2026-52860\n   * SECURITY UPDATE: out-of-bounds write reading a crafted spell file:\n     tree_count_words() and sug_filltree() descended the word trie without\n     bounding the depth, so a deeply nested trie wrote past the ends of\n     their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.\n     - debian/patches/CVE-2026-55693.patch: only descend while\n       depth \u003c MAXWLEN - 1 in both trie walkers, in src/spellfile.c;\n       matches upstream patch 9.2.0653.\n     - CVE-2026-55693\n   * SECURITY UPDATE: code injection when netrw opens a remote file:\n     s:NetrwBrowse() passed bufname() unescaped into an :execute'd \"b\"\n     command, so a buffer name containing the Ex command separator ran\n     arbitrary Ex commands.\n     - debian/patches/CVE-2026-55895.patch: escape the name with\n       fnameescape() in runtime/autoload/netrw.vim; matches the applicable\n       hunk of upstream patch 9.2.0663.\n     - CVE-2026-55895\n   * SECURITY UPDATE: out-of-bounds write in SOFO soundfolding:\n     spell_soundfold_sofo() walked the input word without checking the\n     index into its MAXWLEN-sized result buffer, so a crafted spell file\n     with a long SOFO translation wrote past the end of it.\n     - debian/patches/CVE-2026-57455.patch: add the ri \u003c MAXWLEN - 1 abort\n       condition to the translation loop, in src/spell.c; matches upstream\n       patch 9.2.0698.\n     - CVE-2026-57455\n   * SECURITY UPDATE: code execution via doc strings in Python\n     omni-completion: get_code() wrapped the doc string harvested from the\n     buffer in triple quotes, so a doc string containing a triple quote\n     closed the literal and the remainder was executed as code during\n     completion.\n     - debian/patches/CVE-2026-57456.patch: quote doc strings with repr()\n       at all three generation sites in both\n       runtime/autoload/pythoncomplete.vim and python3complete.vim;\n       matches upstream patch 9.2.0699.\n     - CVE-2026-57456\n   * SECURITY UPDATE: arbitrary Ex command execution during C\n     omni-completion: s:StructMembers() interpolated the typeref field of a\n     tags entry into a :vimgrep pattern run through :execute, so a crafted\n     tags file could close the pattern and append an Ex command that ran\n     when C omni-completion was invoked on a hostile source file.\n     - debian/patches/CVE-2026-59858.patch: escape the type field with\n       escape(typename, '/\\') before building the pattern, in\n       runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0735.\n     - CVE-2026-59858\n   * SECURITY UPDATE: the escaping above is not sufficient on its own: an\n     unclosed bracket in the typeref makes :vimgrep's pattern skipping\n     fail, after which a bar in the tag value is again treated as a command\n     separator and executed.\n     - debian/patches/CVE-2026-73073.patch: match the field literally with\n       \\V ... \\m instead of relying on escaping alone, in\n       runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0845.\n     - CVE-2026-73073","status":"published","published":"2026-08-22T10:35:47Z","modified":"2026-10-26T09:31:47.404553765Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2026-0240","title":"Updated vim packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nArbitrary Code Execution via Python Omni-Completion in Vim \u003c 9.2.0561.\n(CVE-2026-52858)\nOut-of-bounds Read in Terminal Screen Snapshot in Vim \u003c 9.2.0565.\n(CVE-2026-52859)\nArbitrary Code Execution via Python Omni-Completion in Vim \u003c 9.2.0597.\n(CVE-2026-52860)\nOut-of-bounds Write in Spell File Word Count in Vim \u003c 9.2.0653.\n(CVE-2026-55693)\nOut-of-bounds Write in Spell File Prefix Dump in Vim \u003c 9.2.0662.\n(CVE-2026-55892)\nVimscript Code Injection in netrw NetrwLocalRmFile() via crafted\nfilename affects Vim \u003c 9.2.0663. (CVE-2026-55895)\nOut-of-bounds Read in Text Property Count in Vim \u003c 9.2.0670.\n(CVE-2026-57451)\nOut-of-bounds Read with libsodium-encrypted Files in Vim \u003c 9.2.0671.\n(CVE-2026-57452)\nPowerShell Command Injection in zip.vim via Crafted Archive Entry Names\nin Vim \u003e 9.1.1783 \u0026\u0026 Vim \u003c 9.2.0678. (CVE-2026-57453)\nOut-of-bounds Read with Text Properties in Vim \u003e= 9.2.0320 \u0026\u0026 Vim \u003c\n9.2.0679. (CVE-2026-57454)\nOut-of-bounds Write in SOFO Soundfolding in Vim \u003c 9.2.0698.\n(CVE-2026-57455)\nArbitrary Code Execution via Python Omni-Completion Docstrings in Vim \u003c\n9.2.0699. (CVE-2026-57456)\n","status":"published","published":"2026-07-10T15:41:14Z","modified":"2026-07-10T15:45:04.007440114Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-55693","title":"CVE-2026-55693 in vim - Patched by Root","description":"Root has patched CVE-2026-55693 in the vim package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-31T08:18:29Z","modified":"2026-08-31T09:15:10.430746513Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-55693","title":"CVE-2026-55693 in vim - Patched by Root","description":"Root has patched CVE-2026-55693 in the vim package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-26T07:45:37Z","modified":"2026-08-26T09:00:07.087849315Z","updated_at":"2026-11-02T15:53:32.298225Z"},{"id":"USN-8500-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","status":"published","published":"2026-07-02T16:46:58Z","modified":"2026-07-02T23:00:06.16685198Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}