What’s Vulnerable › Products

ohmyzsh vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ohmyzsh version is affected

Latest ohmyzsh vulnerabilities

• CVE-2026-50187 — Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files (CVSS 8.8)