MEDIUM
so-fancy
CVE published 2026-07-29
CVE-2026-50642
CVE-2026-50642 debrief based on the supplied source corpus. The CVE record was published on 2026-07-29T11:16:49.617Z. diff-so-fancy does not properly sanitize non-SGR terminal control sequences before outputting diff data. An attacker can embed malicious control sequences in filenames, diff metadata, or file content that are rendered directly in the terminal during diff viewing. This can lead to output ma [truncated]