{"id":"CVE-2026-73073","aliases":["ALPINE-CVE-2026-73073","ALSA-2026:75768","ALSA-2026:75769","ALSA-2026:77359","AZL-96767","BELL-CVE-2026-73073","CLSA-2026-1787394930","CLSA-2026-1788182469","CLSA-2026-1789136288","CLSA-2026-1792215398","CLSA-2026-1792217772","CLSA-2026-1792745277","CLSA-2026-1792803646","CLSA-2026-1792807762","DEBIAN-CVE-2026-73073","EUVD-2026-60975","GHSA-cx73-phcg-3j5g","MGASA-2026-0355","OESA-2026-3593","OESA-2026-3594","OESA-2026-3595","OESA-2026-3596","OESA-2026-3859","RHSA-2026:57614","RHSA-2026:75768","RHSA-2026:75769","RHSA-2026:77359","RLSA-2026:75768","RLSA-2026:75769","RLSA-2026:77359","ROOT-OS-DEBIAN-11-CVE-2026-73073","ROOT-OS-DEBIAN-12-CVE-2026-73073","UBUNTU-CVE-2026-73073","USN-8679-1","USN-8679-2"],"status":"published","title":"Vim: Arbitrary Ex Command Execution in C Omni-Completion","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00152,"percentile":0.04359,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-829","CWE-94"],"published":"2026-08-18T15:25:26Z","modified":"2026-11-03T06:32:58Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["9.2.0854-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["9.2.0854-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"vim-X11","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"vim-common","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"vim-enhanced","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"vim-filesystem","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"vim-minimal","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-X11","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-common","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-data","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-enhanced","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-filesystem","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"vim-minimal","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"xxd","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-X11","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-common","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-enhanced","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-filesystem","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"vim-minimal","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"vim","fixed_in":["9.2.0976-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"vim","fixed_in":["9.2.0854-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"vim","fixed_in":["9.2.0854-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"vim","fixed_in":["9.2.0854-r1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","fixed_in":["3:7.4.1689-3ubuntu1.5+tuxcare.els73"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-X11","fixed_in":["2:8.2.2637-22.el9_6.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-common","fixed_in":["2:8.2.2637-22.el9_6.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-enhanced","fixed_in":["2:8.2.2637-22.el9_6.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-filesystem","fixed_in":["2:8.2.2637-22.el9_6.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-minimal","fixed_in":["2:8.2.2637-22.el9_6.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-X11","fixed_in":["2:8.2.2637-22.el9_2.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-common","fixed_in":["2:8.2.2637-22.el9_2.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-enhanced","fixed_in":["2:8.2.2637-22.el9_2.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-filesystem","fixed_in":["2:8.2.2637-22.el9_2.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-minimal","fixed_in":["2:8.2.2637-22.el9_2.1.tuxcare.els43"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:9.1.1230-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:9.2.0858-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim-common","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"vim","fixed_in":["2:8.2.2637-26.el9_8.23"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"vim","fixed_in":["2:9.1.083-9.el10_2.22"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"vim","fixed_in":["2:8.0.1763-32.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"vim","fixed_in":["2:8.2.2434-3+deb11u3.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-vim","fixed_in":["2:8.2.2434-3+deb11u3.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"vim","fixed_in":["2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-vim","fixed_in":["2:9.0.1378-2+deb12u2.aikido.20","2:9.0.1378-2+deb12u2.aikido.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm33"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm39"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.13+esm24"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.32+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"vim","fixed_in":["2:8.2.3995-1ubuntu2.36"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"vim","fixed_in":["2:9.1.0016-1ubuntu7.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"vim","fixed_in":["2:9.1.2141-1ubuntu4.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0854-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0854-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0976-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0820-r2"},{"fixed":"9.2.0854-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.1415-r0"},{"fixed":"9.2.0854-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.1395-r0"},{"fixed":"9.2.0854-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els73"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u6+tuxcare.els28"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els43"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els64"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els64"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els64"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els64"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els64"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:9.0.1378-2","2:9.0.1378-2+deb12u1","2:9.0.1378-2+deb12u2","2:9.0.1658-1","2:9.0.1672-1","2:9.0.1894-1","2:9.0.2018-1","2:9.0.2087-1","2:9.0.2103-1","2:9.0.2116-1","2:9.0.2189-1","2:9.1.0-1","2:9.1.0016-1","2:9.1.0199-1","2:9.1.0374-1","2:9.1.0377-1","2:9.1.0496-1","2:9.1.0698-1","2:9.1.0709-1","2:9.1.0709-2","2:9.1.0777-1","2:9.1.0861-1","2:9.1.0967-1","2:9.1.0967-2","2:9.1.1113-1","2:9.1.1230-1","2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1","2:9.2.0782-1","2:9.2.0858-1"]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.1230-2+deb13u1"}]}],"versions":["2:9.1.1230-2"]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.2.0858-1"}]}],"versions":["2:9.1.1230-2","2:9.1.1385-1","2:9.1.1766-1","2:9.1.1829-1","2:9.1.1846-1","2:9.1.1882-1","2:9.1.2103-1","2:9.1.2141-1","2:9.2.0119-1","2:9.2.0136-1","2:9.2.0218-1","2:9.2.0315-1","2:9.2.0338-1","2:9.2.0355-1","2:9.2.0428-1","2:9.2.0461-1","2:9.2.0524-1","2:9.2.0782-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.1011-2.mga10"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.1011-2.mga9"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-58.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-45.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-45.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-59.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2092-45.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-default-editor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"xxd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.967-1.1.hum1"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-26.el9_8.23"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.083-9.el10_2.22"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-32.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2434-3+deb11u3.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.20"},{"fixed":"2:9.0.1378-2+deb12u2.aikido.21"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm33"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16","2:7.4.052-1ubuntu3.1+esm17","2:7.4.052-1ubuntu3.1+esm18","2:7.4.052-1ubuntu3.1+esm19","2:7.4.052-1ubuntu3.1+esm20","2:7.4.052-1ubuntu3.1+esm21","2:7.4.052-1ubuntu3.1+esm22","2:7.4.052-1ubuntu3.1+esm23","2:7.4.052-1ubuntu3.1+esm24","2:7.4.052-1ubuntu3.1+esm25","2:7.4.052-1ubuntu3.1+esm26","2:7.4.052-1ubuntu3.1+esm27","2:7.4.052-1ubuntu3.1+esm28","2:7.4.052-1ubuntu3.1+esm29","2:7.4.052-1ubuntu3.1+esm30","2:7.4.052-1ubuntu3.1+esm31","2:7.4.052-1ubuntu3.1+esm32"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm39"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12","2:7.4.1689-3ubuntu1.5+esm13","2:7.4.1689-3ubuntu1.5+esm14","2:7.4.1689-3ubuntu1.5+esm15","2:7.4.1689-3ubuntu1.5+esm17","2:7.4.1689-3ubuntu1.5+esm18","2:7.4.1689-3ubuntu1.5+esm19","2:7.4.1689-3ubuntu1.5+esm20","2:7.4.1689-3ubuntu1.5+esm22","2:7.4.1689-3ubuntu1.5+esm23","2:7.4.1689-3ubuntu1.5+esm24","2:7.4.1689-3ubuntu1.5+esm25","2:7.4.1689-3ubuntu1.5+esm26","2:7.4.1689-3ubuntu1.5+esm27","2:7.4.1689-3ubuntu1.5+esm28","2:7.4.1689-3ubuntu1.5+esm29","2:7.4.1689-3ubuntu1.5+esm30","2:7.4.1689-3ubuntu1.5+esm31","2:7.4.1689-3ubuntu1.5+esm32","2:7.4.1689-3ubuntu1.5+esm33","2:7.4.1689-3ubuntu1.5+esm34","2:7.4.1689-3ubuntu1.5+esm35","2:7.4.1689-3ubuntu1.5+esm36","2:7.4.1689-3ubuntu1.5+esm37","2:7.4.1689-3ubuntu1.5+esm38"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+esm24"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11","2:8.0.1453-1ubuntu1.12","2:8.0.1453-1ubuntu1.13","2:8.0.1453-1ubuntu1.13+esm1","2:8.0.1453-1ubuntu1.13+esm3","2:8.0.1453-1ubuntu1.13+esm4","2:8.0.1453-1ubuntu1.13+esm5","2:8.0.1453-1ubuntu1.13+esm6","2:8.0.1453-1ubuntu1.13+esm7","2:8.0.1453-1ubuntu1.13+esm8","2:8.0.1453-1ubuntu1.13+esm9","2:8.0.1453-1ubuntu1.13+esm10","2:8.0.1453-1ubuntu1.13+esm11","2:8.0.1453-1ubuntu1.13+esm12","2:8.0.1453-1ubuntu1.13+esm13","2:8.0.1453-1ubuntu1.13+esm14","2:8.0.1453-1ubuntu1.13+esm15","2:8.0.1453-1ubuntu1.13+esm16","2:8.0.1453-1ubuntu1.13+esm17","2:8.0.1453-1ubuntu1.13+esm18","2:8.0.1453-1ubuntu1.13+esm19","2:8.0.1453-1ubuntu1.13+esm20","2:8.0.1453-1ubuntu1.13+esm21","2:8.0.1453-1ubuntu1.13+esm22","2:8.0.1453-1ubuntu1.13+esm23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.32+esm13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12","2:8.1.2269-1ubuntu5.13","2:8.1.2269-1ubuntu5.14","2:8.1.2269-1ubuntu5.15","2:8.1.2269-1ubuntu5.16","2:8.1.2269-1ubuntu5.17","2:8.1.2269-1ubuntu5.18","2:8.1.2269-1ubuntu5.20","2:8.1.2269-1ubuntu5.21","2:8.1.2269-1ubuntu5.22","2:8.1.2269-1ubuntu5.23","2:8.1.2269-1ubuntu5.24","2:8.1.2269-1ubuntu5.25","2:8.1.2269-1ubuntu5.26","2:8.1.2269-1ubuntu5.29","2:8.1.2269-1ubuntu5.30","2:8.1.2269-1ubuntu5.31","2:8.1.2269-1ubuntu5.32","2:8.1.2269-1ubuntu5.32+esm2","2:8.1.2269-1ubuntu5.32+esm3","2:8.1.2269-1ubuntu5.32+esm4","2:8.1.2269-1ubuntu5.32+esm5","2:8.1.2269-1ubuntu5.32+esm6","2:8.1.2269-1ubuntu5.32+esm7","2:8.1.2269-1ubuntu5.32+esm8","2:8.1.2269-1ubuntu5.32+esm9","2:8.1.2269-1ubuntu5.32+esm10","2:8.1.2269-1ubuntu5.32+esm12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.36"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13","2:8.2.3995-1ubuntu2.15","2:8.2.3995-1ubuntu2.16","2:8.2.3995-1ubuntu2.17","2:8.2.3995-1ubuntu2.18","2:8.2.3995-1ubuntu2.19","2:8.2.3995-1ubuntu2.20","2:8.2.3995-1ubuntu2.21","2:8.2.3995-1ubuntu2.22","2:8.2.3995-1ubuntu2.23","2:8.2.3995-1ubuntu2.24","2:8.2.3995-1ubuntu2.26","2:8.2.3995-1ubuntu2.27","2:8.2.3995-1ubuntu2.28","2:8.2.3995-1ubuntu2.29","2:8.2.3995-1ubuntu2.30","2:8.2.3995-1ubuntu2.31","2:8.2.3995-1ubuntu2.32","2:8.2.3995-1ubuntu2.33","2:8.2.3995-1ubuntu2.34","2:8.2.3995-1ubuntu2.35"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0016-1ubuntu7.20"}]}],"versions":["2:9.0.1672-1ubuntu2","2:9.0.2087-1ubuntu1","2:9.0.2116-1ubuntu1","2:9.0.2116-1ubuntu2","2:9.0.2184-0ubuntu1","2:9.0.2189-1ubuntu1","2:9.1.0-1ubuntu1","2:9.1.0016-1ubuntu2","2:9.1.0016-1ubuntu6","2:9.1.0016-1ubuntu7","2:9.1.0016-1ubuntu7.1","2:9.1.0016-1ubuntu7.2","2:9.1.0016-1ubuntu7.3","2:9.1.0016-1ubuntu7.4","2:9.1.0016-1ubuntu7.5","2:9.1.0016-1ubuntu7.6","2:9.1.0016-1ubuntu7.7","2:9.1.0016-1ubuntu7.8","2:9.1.0016-1ubuntu7.9","2:9.1.0016-1ubuntu7.10","2:9.1.0016-1ubuntu7.11","2:9.1.0016-1ubuntu7.12","2:9.1.0016-1ubuntu7.13","2:9.1.0016-1ubuntu7.14","2:9.1.0016-1ubuntu7.15","2:9.1.0016-1ubuntu7.16","2:9.1.0016-1ubuntu7.17","2:9.1.0016-1ubuntu7.18","2:9.1.0016-1ubuntu7.19"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.2141-1ubuntu4.9"}]}],"versions":["2:9.1.0967-1ubuntu6","2:9.1.1882-1ubuntu1","2:9.1.1882-1ubuntu2","2:9.1.2141-1ubuntu1","2:9.1.2141-1ubuntu2","2:9.1.2141-1ubuntu4","2:9.1.2141-1ubuntu4.1","2:9.1.2141-1ubuntu4.2","2:9.1.2141-1ubuntu4.3","2:9.1.2141-1ubuntu4.5","2:9.1.2141-1ubuntu4.6","2:9.1.2141-1ubuntu4.7","2:9.1.2141-1ubuntu4.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm33"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16","2:7.4.052-1ubuntu3.1+esm17","2:7.4.052-1ubuntu3.1+esm18","2:7.4.052-1ubuntu3.1+esm19","2:7.4.052-1ubuntu3.1+esm20","2:7.4.052-1ubuntu3.1+esm21","2:7.4.052-1ubuntu3.1+esm22","2:7.4.052-1ubuntu3.1+esm23","2:7.4.052-1ubuntu3.1+esm24","2:7.4.052-1ubuntu3.1+esm25","2:7.4.052-1ubuntu3.1+esm26","2:7.4.052-1ubuntu3.1+esm27","2:7.4.052-1ubuntu3.1+esm28","2:7.4.052-1ubuntu3.1+esm29","2:7.4.052-1ubuntu3.1+esm30","2:7.4.052-1ubuntu3.1+esm31","2:7.4.052-1ubuntu3.1+esm32"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm39"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3","2:7.4.1689-3ubuntu1.5+esm4","2:7.4.1689-3ubuntu1.5+esm5","2:7.4.1689-3ubuntu1.5+esm6","2:7.4.1689-3ubuntu1.5+esm7","2:7.4.1689-3ubuntu1.5+esm8","2:7.4.1689-3ubuntu1.5+esm10","2:7.4.1689-3ubuntu1.5+esm11","2:7.4.1689-3ubuntu1.5+esm12","2:7.4.1689-3ubuntu1.5+esm13","2:7.4.1689-3ubuntu1.5+esm14","2:7.4.1689-3ubuntu1.5+esm15","2:7.4.1689-3ubuntu1.5+esm17","2:7.4.1689-3ubuntu1.5+esm18","2:7.4.1689-3ubuntu1.5+esm19","2:7.4.1689-3ubuntu1.5+esm20","2:7.4.1689-3ubuntu1.5+esm22","2:7.4.1689-3ubuntu1.5+esm23","2:7.4.1689-3ubuntu1.5+esm24","2:7.4.1689-3ubuntu1.5+esm25","2:7.4.1689-3ubuntu1.5+esm26","2:7.4.1689-3ubuntu1.5+esm27","2:7.4.1689-3ubuntu1.5+esm28","2:7.4.1689-3ubuntu1.5+esm29","2:7.4.1689-3ubuntu1.5+esm30","2:7.4.1689-3ubuntu1.5+esm31","2:7.4.1689-3ubuntu1.5+esm32","2:7.4.1689-3ubuntu1.5+esm33","2:7.4.1689-3ubuntu1.5+esm34","2:7.4.1689-3ubuntu1.5+esm35","2:7.4.1689-3ubuntu1.5+esm36","2:7.4.1689-3ubuntu1.5+esm37","2:7.4.1689-3ubuntu1.5+esm38"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.13+esm24"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7","2:8.0.1453-1ubuntu1.8","2:8.0.1453-1ubuntu1.9","2:8.0.1453-1ubuntu1.10","2:8.0.1453-1ubuntu1.11","2:8.0.1453-1ubuntu1.12","2:8.0.1453-1ubuntu1.13","2:8.0.1453-1ubuntu1.13+esm1","2:8.0.1453-1ubuntu1.13+esm3","2:8.0.1453-1ubuntu1.13+esm4","2:8.0.1453-1ubuntu1.13+esm5","2:8.0.1453-1ubuntu1.13+esm6","2:8.0.1453-1ubuntu1.13+esm7","2:8.0.1453-1ubuntu1.13+esm8","2:8.0.1453-1ubuntu1.13+esm9","2:8.0.1453-1ubuntu1.13+esm10","2:8.0.1453-1ubuntu1.13+esm11","2:8.0.1453-1ubuntu1.13+esm12","2:8.0.1453-1ubuntu1.13+esm13","2:8.0.1453-1ubuntu1.13+esm14","2:8.0.1453-1ubuntu1.13+esm15","2:8.0.1453-1ubuntu1.13+esm16","2:8.0.1453-1ubuntu1.13+esm17","2:8.0.1453-1ubuntu1.13+esm18","2:8.0.1453-1ubuntu1.13+esm19","2:8.0.1453-1ubuntu1.13+esm20","2:8.0.1453-1ubuntu1.13+esm21","2:8.0.1453-1ubuntu1.13+esm22","2:8.0.1453-1ubuntu1.13+esm23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.32+esm13"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4","2:8.1.2269-1ubuntu5.6","2:8.1.2269-1ubuntu5.7","2:8.1.2269-1ubuntu5.8","2:8.1.2269-1ubuntu5.9","2:8.1.2269-1ubuntu5.11","2:8.1.2269-1ubuntu5.12","2:8.1.2269-1ubuntu5.13","2:8.1.2269-1ubuntu5.14","2:8.1.2269-1ubuntu5.15","2:8.1.2269-1ubuntu5.16","2:8.1.2269-1ubuntu5.17","2:8.1.2269-1ubuntu5.18","2:8.1.2269-1ubuntu5.20","2:8.1.2269-1ubuntu5.21","2:8.1.2269-1ubuntu5.22","2:8.1.2269-1ubuntu5.23","2:8.1.2269-1ubuntu5.24","2:8.1.2269-1ubuntu5.25","2:8.1.2269-1ubuntu5.26","2:8.1.2269-1ubuntu5.29","2:8.1.2269-1ubuntu5.30","2:8.1.2269-1ubuntu5.31","2:8.1.2269-1ubuntu5.32","2:8.1.2269-1ubuntu5.32+esm2","2:8.1.2269-1ubuntu5.32+esm3","2:8.1.2269-1ubuntu5.32+esm4","2:8.1.2269-1ubuntu5.32+esm5","2:8.1.2269-1ubuntu5.32+esm6","2:8.1.2269-1ubuntu5.32+esm7","2:8.1.2269-1ubuntu5.32+esm8","2:8.1.2269-1ubuntu5.32+esm9","2:8.1.2269-1ubuntu5.32+esm10","2:8.1.2269-1ubuntu5.32+esm12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1ubuntu2.36"}]}],"versions":["2:8.2.2434-3ubuntu3","2:8.2.2434-3ubuntu4","2:8.2.3565-1ubuntu1","2:8.2.3565-1ubuntu2","2:8.2.3565-1ubuntu3","2:8.2.3565-1ubuntu5","2:8.2.3995-1ubuntu1","2:8.2.3995-1ubuntu2","2:8.2.3995-1ubuntu2.1","2:8.2.3995-1ubuntu2.3","2:8.2.3995-1ubuntu2.4","2:8.2.3995-1ubuntu2.5","2:8.2.3995-1ubuntu2.7","2:8.2.3995-1ubuntu2.8","2:8.2.3995-1ubuntu2.9","2:8.2.3995-1ubuntu2.10","2:8.2.3995-1ubuntu2.11","2:8.2.3995-1ubuntu2.12","2:8.2.3995-1ubuntu2.13","2:8.2.3995-1ubuntu2.15","2:8.2.3995-1ubuntu2.16","2:8.2.3995-1ubuntu2.17","2:8.2.3995-1ubuntu2.18","2:8.2.3995-1ubuntu2.19","2:8.2.3995-1ubuntu2.20","2:8.2.3995-1ubuntu2.21","2:8.2.3995-1ubuntu2.22","2:8.2.3995-1ubuntu2.23","2:8.2.3995-1ubuntu2.24","2:8.2.3995-1ubuntu2.26","2:8.2.3995-1ubuntu2.27","2:8.2.3995-1ubuntu2.28","2:8.2.3995-1ubuntu2.29","2:8.2.3995-1ubuntu2.30","2:8.2.3995-1ubuntu2.31","2:8.2.3995-1ubuntu2.32","2:8.2.3995-1ubuntu2.33","2:8.2.3995-1ubuntu2.34","2:8.2.3995-1ubuntu2.35"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.0016-1ubuntu7.20"}]}],"versions":["2:9.0.1672-1ubuntu2","2:9.0.2087-1ubuntu1","2:9.0.2116-1ubuntu1","2:9.0.2116-1ubuntu2","2:9.0.2184-0ubuntu1","2:9.0.2189-1ubuntu1","2:9.1.0-1ubuntu1","2:9.1.0016-1ubuntu2","2:9.1.0016-1ubuntu6","2:9.1.0016-1ubuntu7","2:9.1.0016-1ubuntu7.1","2:9.1.0016-1ubuntu7.2","2:9.1.0016-1ubuntu7.3","2:9.1.0016-1ubuntu7.4","2:9.1.0016-1ubuntu7.5","2:9.1.0016-1ubuntu7.6","2:9.1.0016-1ubuntu7.7","2:9.1.0016-1ubuntu7.8","2:9.1.0016-1ubuntu7.9","2:9.1.0016-1ubuntu7.10","2:9.1.0016-1ubuntu7.11","2:9.1.0016-1ubuntu7.12","2:9.1.0016-1ubuntu7.13","2:9.1.0016-1ubuntu7.14","2:9.1.0016-1ubuntu7.15","2:9.1.0016-1ubuntu7.16","2:9.1.0016-1ubuntu7.17","2:9.1.0016-1ubuntu7.18","2:9.1.0016-1ubuntu7.19"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.2141-1ubuntu4.9"}]}],"versions":["2:9.1.0967-1ubuntu6","2:9.1.1882-1ubuntu1","2:9.1.1882-1ubuntu2","2:9.1.2141-1ubuntu1","2:9.1.2141-1ubuntu2","2:9.1.2141-1ubuntu4","2:9.1.2141-1ubuntu4.1","2:9.1.2141-1ubuntu4.2","2:9.1.2141-1ubuntu4.3","2:9.1.2141-1ubuntu4.5","2:9.1.2141-1ubuntu4.6","2:9.1.2141-1ubuntu4.7","2:9.1.2141-1ubuntu4.8"]}],"products":[{"vendor":"vim","product":"vim"}],"references":[{"url":"https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g","tags":["x_refsource_CONFIRM","Patch","Vendor Advisory","advisory","article"]},{"url":"https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f","tags":["x_refsource_MISC","Patch","fix","article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0845","tags":["x_refsource_MISC","Product","web","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-73073","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75768","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73073","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-75768.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75769","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-75769.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:77359","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2517950","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-77359.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73073","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-73073","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787394930.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52860","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59858","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1788182469.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789136288.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792215398.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792217772.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4187","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792745277.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43961","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792803646.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47167","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792807762.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73073.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-73073","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0355.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36127","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/17","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/18","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/19","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/20","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/21","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/28","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/29","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/30","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/24/31","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-49m8-wwxj-mr69","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-pmvp-6rcj-98p4","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-69ch-22ch-r887","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/25/8","tags":["web"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-r77m-8m55-rpr6","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73076","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3594","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3595","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3596","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3859","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57614","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57451","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57453","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57454","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52860","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52858","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-52859","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47167","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47162","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46483","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45130","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44656","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43961","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41411","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35177","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34982","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39881","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57614.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455400","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34982","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/01/1","tags":["article"]},{"url":"https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0276","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35177","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456722","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39881","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0316","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461614","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41411","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41411","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0357","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43961","tags":["advisory"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44656","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0435","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45130","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0450","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46483","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0479","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487964","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47162","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0495","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47167","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0496","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52858","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0561","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487989","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52859","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0565","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487987","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-52860","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0597","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57451","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/b2338ca90643e2f01ecb6547c1172716aaec4f79","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0670","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57453","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57453","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0678","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57454","tags":["advisory"]},{"url":"https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949","tags":["article"]},{"url":"https://github.com/vim/vim/releases/tag/v9.2.0679","tags":["article"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517950","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73073","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75768.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75769.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77359.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75768","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75769","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:77359","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-73073","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8679-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8679-2","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-73073","title":"Vim: Arbitrary Ex Command Execution in C Omni-Completion","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T15:25:26.817Z","modified":"2026-08-18T15:31:10.075Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-94","CWE-829"],"updated_at":"2026-11-02T13:43:22.599321Z"}],"euvd":[{"id":"EUVD-2026-60975","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T15:25:26Z","modified":"2026-08-18T15:31:10Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:01:46.405062Z"}],"nvd":[{"id":"CVE-2026-73073","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T16:18:16.73Z","modified":"2026-10-15T20:32:27.513Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94","CWE-829"],"updated_at":"2026-11-02T14:12:38.976695Z"}],"osv":[{"id":"ALPINE-CVE-2026-73073","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T16:18:16.73Z","modified":"2026-11-03T06:32:58.155968756Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2026-73073","status":"published","published":"2026-08-20T06:06:26.76059Z","modified":"2026-10-17T07:15:04.042387242Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:25.777499Z"},{"id":"CVE-2026-73073","title":"Vim: Arbitrary Ex Command Execution in C Omni-Completion","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T15:25:26.817Z","modified":"2026-10-28T10:55:28.699286113Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-829","CWE-94"],"updated_at":"2026-11-02T15:45:15.88521Z"},{"id":"DEBIAN-CVE-2026-73073","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T16:18:16.73Z","modified":"2026-11-01T19:00:43.204106252Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:02.499355Z"},{"id":"OESA-2026-3593","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.(CVE-2026-73072)\n\nVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.(CVE-2026-73073)\n\nVim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.(CVE-2026-73076)","status":"published","published":"2026-09-05T15:02:58Z","modified":"2026-09-05T15:16:25.23248864Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3594","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.(CVE-2026-73072)\n\nVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.(CVE-2026-73073)\n\nVim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.(CVE-2026-73076)","status":"published","published":"2026-09-05T15:02:58Z","modified":"2026-09-05T15:16:25.533546041Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3595","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.(CVE-2026-73072)\n\nVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.(CVE-2026-73073)\n\nVim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.(CVE-2026-73076)","status":"published","published":"2026-09-05T15:02:59Z","modified":"2026-09-05T15:16:25.536489324Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3596","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.(CVE-2026-73072)\n\nVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.(CVE-2026-73073)\n\nVim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.(CVE-2026-73076)","status":"published","published":"2026-09-05T15:03:00Z","modified":"2026-09-05T15:16:25.730983333Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3859","title":"vim security update","description":"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor \u0026amp;apos;Vi\u0026amp;apos;, with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.\r\n\r\nSecurity Fix(es):\n\nVim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.(CVE-2026-73072)\n\nVim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.(CVE-2026-73073)\n\nVim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.(CVE-2026-73076)","status":"published","published":"2026-09-14T16:35:04Z","modified":"2026-09-13T16:45:50.798748721Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:57614","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-12T10:09:11Z","modified":"2026-10-17T10:16:12Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:75768","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-10-07T10:19:56Z","modified":"2026-10-16T10:25:39Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:75769","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-10-06T10:19:05Z","modified":"2026-10-16T10:25:39Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:77359","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2026-10-08T10:20:18Z","modified":"2026-10-16T10:26:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:75768","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-07T06:05:17.389889Z","modified":"2026-10-07T06:30:02.507923064Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:75769","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T12:10:42.614631Z","modified":"2026-10-06T12:45:02.658006118Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:77359","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-08T06:03:13.077958Z","modified":"2026-10-08T06:45:02.80649028Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-73073","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-19T00:00:00Z","modified":"2026-10-17T13:00:56.681559852Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:08.628462Z"},{"id":"ALSA-2026:75768","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:32:37.769291362Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:75769","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:30:50.321292611Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:77359","title":"Important: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.  \n\nSecurity Fix(es):  \n\n  * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-73073)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-07T00:00:00Z","modified":"2026-10-29T11:02:29.748604267Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-96767","title":"CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1","description":"Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845.","status":"published","published":"2026-08-18T16:18:16Z","modified":"2026-09-10T14:17:04.12386285Z","updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"CLSA-2026-1787394930","title":"Fix of 10 CVEs","description":"   * SECURITY UPDATE: command injection in the tar plugin: tar#Vimuntar()\n     escaped the tarball name with shellescape() without the special\n     argument before running gunzip/gzip through :!, so characters that Vim\n     expands in a :! command line (such as % and #) survived in the name\n     and let a crafted archive name run arbitrary shell commands.\n     - debian/patches/CVE-2026-46483.patch: use the shellescape(name, 1)\n       form for both :! invocations in runtime/autoload/tar.vim; matches\n       upstream patch 9.2.0479.\n     - CVE-2026-46483\n   * SECURITY UPDATE: code injection via netrw directory history:\n     s:NetrwBookHistSave() serialised each history entry into\n     ~/.vim/.netrwhist by wrapping the value in single quotes with string\n     concatenation, so a directory name containing a single quote closed\n     the literal and injected Vimscript that ran when the history file was\n     sourced on the next netrw start.\n     - debian/patches/CVE-2026-47162.patch: encode the value with string()\n       in runtime/autoload/netrw.vim; matches upstream patch 9.2.0495.\n     - CVE-2026-47162\n   * SECURITY UPDATE: code execution through Python omni-completion:\n     pythoncomplete and python3complete rebuilt the buffer's Python code\n     and passed it to exec(), including the import and from statements\n     harvested from the buffer, so invoking omni-completion in a hostile\n     Python file executed arbitrary module-level code.\n     - debian/patches/CVE-2026-52858.patch: skip import/from statements\n       unless g:pythoncomplete_allow_import is set, in both\n       runtime/autoload/pythoncomplete.vim and python3complete.vim;\n       matches upstream patches 9.2.0561 and 9.2.0568, the latter being\n       required for the opt-in to take effect at all.\n     - CVE-2026-52858\n   * SECURITY UPDATE: out-of-bounds access when a terminal buffer is\n     snapshotted: the per-cell loop in move_terminal_to_buffer() walked\n     cell.chars[] with no upper bound, and libvterm leaves that array\n     unterminated when a cell uses all VTERM_MAX_CHARS_PER_CELL slots (a\n     base character plus five combining marks), so it read past the array\n     and appended the out-of-bounds values to a buffer sized for far fewer\n     bytes.\n     - debian/patches/CVE-2026-52859.patch: bound the loop with\n       i \u003c VTERM_MAX_CHARS_PER_CELL and size the buffer for six 6-byte\n       characters, in src/terminal.c; matches upstream patch 9.2.0565\n       together with its prerequisite 8.1.0611, without which the bounded\n       loop would still overrun the MB_MAXBYTES-sized buffer.\n     - CVE-2026-52859\n   * SECURITY UPDATE: code execution through Python omni-completion\n     definition headers: Scope.get_code() reproduced def and class headers\n     verbatim in the source handed to exec(), and Python evaluates\n     parameter default values, annotations and base-class expressions at\n     definition time, so crafted headers ran arbitrary code during\n     completion even with imports disabled.\n     - debian/patches/CVE-2026-52860.patch: strip default values and\n       annotations from parameters and accept only dotted names as base\n       classes, in both runtime/autoload/pythoncomplete.vim and\n       python3complete.vim; matches upstream patch 9.2.0597.\n     - CVE-2026-52860\n   * SECURITY UPDATE: out-of-bounds write reading a crafted spell file:\n     tree_count_words() and sug_filltree() descended the word trie without\n     bounding the depth, so a deeply nested trie wrote past the ends of\n     their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.\n     - debian/patches/CVE-2026-55693.patch: only descend while\n       depth \u003c MAXWLEN - 1 in both trie walkers, in src/spellfile.c;\n       matches upstream patch 9.2.0653.\n     - CVE-2026-55693\n   * SECURITY UPDATE: code injection when netrw opens a remote file:\n     s:NetrwBrowse() passed bufname() unescaped into an :execute'd \"b\"\n     command, so a buffer name containing the Ex command separator ran\n     arbitrary Ex commands.\n     - debian/patches/CVE-2026-55895.patch: escape the name with\n       fnameescape() in runtime/autoload/netrw.vim; matches the applicable\n       hunk of upstream patch 9.2.0663.\n     - CVE-2026-55895\n   * SECURITY UPDATE: out-of-bounds write in SOFO soundfolding:\n     spell_soundfold_sofo() walked the input word without checking the\n     index into its MAXWLEN-sized result buffer, so a crafted spell file\n     with a long SOFO translation wrote past the end of it.\n     - debian/patches/CVE-2026-57455.patch: add the ri \u003c MAXWLEN - 1 abort\n       condition to the translation loop, in src/spell.c; matches upstream\n       patch 9.2.0698.\n     - CVE-2026-57455\n   * SECURITY UPDATE: code execution via doc strings in Python\n     omni-completion: get_code() wrapped the doc string harvested from the\n     buffer in triple quotes, so a doc string containing a triple quote\n     closed the literal and the remainder was executed as code during\n     completion.\n     - debian/patches/CVE-2026-57456.patch: quote doc strings with repr()\n       at all three generation sites in both\n       runtime/autoload/pythoncomplete.vim and python3complete.vim;\n       matches upstream patch 9.2.0699.\n     - CVE-2026-57456\n   * SECURITY UPDATE: arbitrary Ex command execution during C\n     omni-completion: s:StructMembers() interpolated the typeref field of a\n     tags entry into a :vimgrep pattern run through :execute, so a crafted\n     tags file could close the pattern and append an Ex command that ran\n     when C omni-completion was invoked on a hostile source file.\n     - debian/patches/CVE-2026-59858.patch: escape the type field with\n       escape(typename, '/\\') before building the pattern, in\n       runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0735.\n     - CVE-2026-59858\n   * SECURITY UPDATE: the escaping above is not sufficient on its own: an\n     unclosed bracket in the typeref makes :vimgrep's pattern skipping\n     fail, after which a bar in the tag value is again treated as a command\n     separator and executed.\n     - debian/patches/CVE-2026-73073.patch: match the field literally with\n       \\V ... \\m instead of relying on escaping alone, in\n       runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0845.\n     - CVE-2026-73073","status":"published","published":"2026-08-22T10:35:47Z","modified":"2026-10-26T09:31:47.404553765Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1788182469","title":"Fix CVE(s): CVE-2026-73073","description":"   * SECURITY UPDATE: arbitrary Ex command execution during C omni-completion:\n     escaping only \"/\" and \"\\\\\" in the typeref/typename tag field was not\n     enough. With no \"/\" in the payload an unclosed \"[\" makes :vimgrep's\n     pattern skipping fail, after which the command parser treats a following\n     \"|\" as a command separator, so a crafted tags entry still runs arbitrary\n     Ex/OS commands when C omni-completion is invoked on a hostile .c file.\n     - debian/patches/CVE-2026-73073.patch: match the type field literally\n       with \\V ... \\m around escape(typename, '/\\') when building the\n       :vimgrep pattern in s:StructMembers(), in\n       runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0845.\n     - CVE-2026-73073","status":"published","published":"2026-08-31T13:21:21Z","modified":"2026-10-26T09:32:02.2191198Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789136288","title":"Fix CVE(s): CVE-2026-73073","description":"   * SECURITY UPDATE: Arbitrary Ex command execution during C omni-completion: s:StructMembers() in runtime/autoload/ccomplete.vim interpolates a tags-file typeref/typename value into a :vimgrep pattern with only \"/\" and \"\\\" escaped, so an unclosed \"[\" makes vimgrep pattern skipping fail and a following \"|\" is then parsed as an Ex command separator, running the rest of the tag value as Ex commands\n     - debian/patches/CVE-2026-73073.patch: match the typename literally in s:StructMembers() by prefixing it with \"\\V\" and restoring magic mode with \"\\m\" for the trailing \"\\(\\t\\|$\\)\" group, so no regex metacharacter in the tag field can affect :vimgrep pattern parsing; this completes CVE-2026-59858.patch (upstream 9.2.0735), whose escaping alone was insufficient; the upstream src/version.c bump and the new src/testdir/test_plugin_ccomplete.vim test are omitted as they do not apply to 8.1.0875\n     - CVE-2026-73073","status":"published","published":"2026-09-11T14:18:18Z","modified":"2026-10-26T09:43:18.336085508Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1792215398","title":"vim: Fix of CVE-2026-73073","description":"- CVE-2026-73073: match the tags typeref literally with \\V in the C omni-completion :vimgrep pattern so an unclosed [ cannot break out of the pattern and run the rest of the tag value as Ex commands","status":"published","published":"2026-10-17T05:36:49Z","modified":"2026-10-26T09:31:20.004700037Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792217772","title":"vim: Fix of 3 CVEs","description":"- CVE-2026-73073: match the tags typeref literally with \\V in the C omni-completion :vimgrep pattern so an unclosed [ cannot break out of the pattern and run the rest of the tag value as Ex commands","status":"published","published":"2026-10-23T23:17:12Z","modified":"2026-10-26T09:30:59.645970154Z","updated_at":"2026-11-02T15:43:52.011757Z"},{"id":"CLSA-2026-1792745277","title":"vim: Fix of 2 CVEs","description":"- CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion (upstream 9.2.0845)\n- CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling (upstream 9.2.0480)","status":"published","published":"2026-10-23T08:48:08Z","modified":"2026-10-26T09:43:22.383804231Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792803646","title":"vim: Fix of 3 CVEs","description":"- CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion (upstream 9.2.0845)\n- CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling (upstream 9.2.0480)\n- CVE-2026-47167: fix Ruby code execution via a crafted pattern in the cucumber ftplugin (upstream 9.2.0496)","status":"published","published":"2026-10-24T16:39:13Z","modified":"2026-10-26T09:43:12.964119971Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792807762","title":"vim: Fix of 3 CVEs","description":"- CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion (upstream 9.2.0845)\n- CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling (upstream 9.2.0480)\n- CVE-2026-47167: fix Ruby code execution via a crafted pattern in the cucumber ftplugin (upstream 9.2.0496)","status":"published","published":"2026-10-24T02:09:34Z","modified":"2026-10-26T09:43:47.070466547Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"MGASA-2026-0355","title":"Updated vim packages fix security vulnerabilities","description":"Arbitrary Code Execution via Shell Keyword Lookup in Vim \u003c 9.2.0839.\n(CVE-2026-73077)\nArbitrary Code Execution via Netrw Menu Construction in Vim \u003c 9.2.0840.\n(CVE-2026-73078)\nHeap Buffer Overflow in Text Property Handling in Vim \u003c 9.2.0841.\n(CVE-2026-73074)\nStack Buffer Overflow in the Vim Socket Server in Vim \u003c 9.2.0842.\n(CVE-2026-73070)\nOut-of-bounds Access in Popup Opacity Handling in Vim \u003e= 9.2.0469 \u0026\u0026 Vim\n\u003c 9.2.0843. (CVE-2026-73075)\nUse-after-free in JSON Decoding in Vim \u003e= 9.2.0511 \u0026\u0026 Vim \u003c 9.2.0844.\n(CVE-2026-73071)\nArbitrary Ex Command Execution in C Omni-Completion in Vim \u003c 9.2.0845.\n(CVE-2026-73073)\nHeap Buffer Overflow when Loading a Spell File in Vim \u003c 9.2.0846.\n(CVE-2026-73072)\nArbitrary Command Execution via Malicious `.VimballRecord` Entry Replay\nin `vimball.vim`. (CVE-2026-73076)\n","status":"published","published":"2026-09-01T03:06:53Z","modified":"2026-09-01T03:26:20.493146665Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-73073","title":"CVE-2026-73073 in vim - Patched by Root","description":"Root has patched CVE-2026-73073 in the vim package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-31T08:18:29Z","modified":"2026-08-31T09:15:03.876943663Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-73073","title":"CVE-2026-73073 in vim - Patched by Root","description":"Root has patched CVE-2026-73073 in the vim package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-26T07:45:37Z","modified":"2026-08-26T09:00:13.601781684Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"USN-8679-1","title":"vim vulnerability","description":"It was discovered that Vim incorrectly handled certain tags files. An\nattacker could possibly use this issue to execute arbitrary code.","status":"published","published":"2026-08-25T19:29:14Z","modified":"2026-10-17T12:55:29.179026221Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8679-2","title":"vim vulnerability","description":"USN-8679-1 fixed a vulnerability in Vim. This update provides the\ncorresponding update for Ubuntu 26.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Vim incorrectly handled certain tags files. An\n attacker could possibly use this issue to execute arbitrary code.","status":"published","published":"2026-09-08T17:12:17Z","modified":"2026-10-17T12:52:38.382779438Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}