Dysk
Monthly
Terminal escape sequence injection in Canop dysk before 3.8.2 allows a local low-privileged user who can create FUSE mounts to place ESC/OSC sequences in mount-point names or fsname, which dysk then renders unsanitized in its table and CSV output; when another user runs dysk in an interpreting terminal, output can be spoofed or hidden and window titles changed. The issue is local-only with victim interaction, integrity impact only, no code execution or data disclosure, and no public exploit identified at time of analysis (priority: monitor).
Terminal escape sequence injection in Canop dysk before 3.8.2 allows a local low-privileged user who can create FUSE mounts to place ESC/OSC sequences in mount-point names or fsname, which dysk then renders unsanitized in its table and CSV output; when another user runs dysk in an interpreting terminal, output can be spoofed or hidden and window titles changed. The issue is local-only with victim interaction, integrity impact only, no code execution or data disclosure, and no public exploit identified at time of analysis (priority: monitor).