Issues · macvim-dev/macvim · GitHub

Labels Milestones New issue

[Security] MacVim affected by GHSA-4473-94jm-w5x9 — cucumber ftplugin Ruby eval injection

#1672

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-45130 — spell file heap buffer overflow via crafted .spl file

#1671

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-46483 — tar.vim tar#Vimuntar() command injection

#1669

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by VIM-9.2.0481 — netrw NetrwMaps() command injection via crafted directory names

#1667

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-42307 — netrw sftp tmpfile not escaped (OS command injection)

#1666

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-41411 — tag file command injection via backtick in mch_has_wildcard()

#1665

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-43961 — netrw NetrwMarkFile() filter() string injection via crafted filename

#1664

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by GHSA-crm5-rh6j-2c7c — netrw NetrwBookHistSave() persistent code injection

#1663

· dkgkdfg65 opened

on May 18, 2026

[Security] MacVim affected by CVE-2026-44656 — :find completion backtick injection via 'path' option

#1662

· dkgkdfg65 opened

on May 18, 2026

MacVim not loading plugins from my ~/.vim directory

#1641

· markaudacity opened

on Apr 15, 2026

:shell with guioptions+=! not showing prompt

#1640

· ir0nh34d opened

on Apr 13, 2026

·

Multiple CVEs — including CVE-2026-34714 (fixed upstream in Vim 9.2.0272)

#1634

· poige opened

on Apr 3, 2026