ohmyzsh vulnerabilities

6 published CVEs name ohmyzsh among the affected products.

Critical 0High 6Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-50187
Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files
ohmyzsh · ohmyzsh
High8.8
CVE-2021-3769
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh · ohmyzsh/ohmyzsh
High7.5
CVE-2021-3727
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh · ohmyzsh/ohmyzsh
High7.5
CVE-2021-3726
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh · ohmyzsh/ohmyzsh
High7.5
CVE-2021-3725
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh · ohmyzsh/ohmyzsh
High7.5
CVE-2021-3934
OS Command Injection in ohmyzsh/ohmyzsh
ohmyzsh · ohmyzsh/ohmyzsh
High7.8