spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-100867 · Microsoft / collected KEV context

cve-program · CVE-2026-100867

• https://github.com/spaceship-prompt/spaceship-prompt/issues/1567
• https://github.com/spaceship-prompt/spaceship-prompt/blob/fd0d6653a134fe28f498eae1784fbb46d27f20f3/lib/section.zsh#L100-L102
• https://github.com/spaceship-prompt/spaceship-prompt/blob/fd0d6653a134fe28f498eae1784fbb46d27f20f3/sections/package.zsh#L41
• https://github.com/spaceship-prompt/spaceship-prompt
• https://www.vulncheck.com/advisories/spaceship-prompt-through-4.22.5-terminal-escape-sequence-injection

No related operational record is retained in the current change model.