# Vulnerability in `title` function Description: the ...

Critical severity Unreviewed Published Dec 1, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Vulnerability in `title` function Description: the `title` function defined in `lib/termsupport.zsh` uses `print` to set the terminal title to a user-supplied string. In Oh My Zsh, this function is always used securely, but custom user code could use the `title` function in a way that is unsafe. Fixed in: a263cdac. Impacted areas: - `title` function in `lib/termsupport.zsh`. - Custom user code using the `title` function.

References

Published by the National Vulnerability Database

Nov 30, 2021

Published to the GitHub Advisory Database Dec 1, 2021

Last updated Feb 1, 2023