GHSA lookup

GHSA-2GMJ-RPQF-PXVH

Pruva has a verified reproduction for GHSA-2GMJ-RPQF-PXVH: Vim modeline handling for the tabpanel option allows sandbox escape via autocmd_add, enabling OS command execution when opening a crafted file.. The canonical evidence record is REPRO-2026-00124.

REPRO

REPRO-2026-00124

Package

Vim · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents GitHub advisory