Carter Sande

**Name of the Vulnerable Software and Affected Versions** Zutty versions prior to 0.13 **Description** The issue allows arbitrary code execution through DECRQSS in text written to the terminal. **Recommendations** For versions prior to 0.13, update to version 0.13 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Kitty versions prior to 0.26.2 **Description** The issue is related to insufficient validation in the desktop notification escape sequence, which can lead to arbitrary code execution. This occurs when a user displays attacker-controlled content in the terminal and then clicks on a notification popup. **Recommendations** For Kitty versions prior to 0.26.2, update to version 0.26.2 or later to resolve the issue. As a temporary workaround, consider avoiding the display of attacker-controlled content in the terminal and refraining from clicking on notification popups from untrusted sources.