Dundee vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dundee products: 1 record(s), with severity, exploitation and fixes.

Gdu 1

Exploited only (KEV) →

CVE-2026-73480 Medium · 5.0 CWE-116 Aug 13, 2026

gdu Terminal Injection via Unstripped Escape Sequences

gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other terminal-dependent effects.