zed · threatengine.sh

CVE-2026-27976

< 0.224.4

Zed, a code editor, has an extension installer allows tar/gzip downloads. Prior to version 0.224.4, the tar extractor (`async_tar:

8.8HIGH

CVE-2026-27967

< 0.225.9

Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (read_file, edit_file)

7.1HIGH

CVE-2026-27800

< 0.224.4

Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior t

7.4HIGH

CVE-2026-25805

< 0.219.4

Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking f

6.4MEDIUM

CVE-2025-68433

< 0.218.2

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Contex

7.7HIGH

CVE-2025-68432

< 0.218.2

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Ser

7.7HIGH

CVE-2023-50440

< 2023.5

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021

5.5MEDIUM

CVE-2023-50439

< q.2020.3

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021

5.3MEDIUM

CVE-2023-50444

< q.2020.3

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows

7.5HIGH

CVE-2019-7312

< 2.0.199

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualifi

5.3MEDIUM

CVE-2018-16518

<= 6.1

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition

9.8CRITICAL