CVE-2026-73506 | Jan De Dobbeleer Oh My Posh up to 29.35.0 Writer src/terminal/writer.go write s injection

A vulnerability identified as problematic has been detected in Jan De Dobbeleer Oh My Posh up to 29.35.0. Affected by this issue is the function write of the file src/terminal/writer.go of the component Writer. Performing a manipulation of the argument s results in injection.

This vulnerability was named CVE-2026-73506. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More