AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-3769

HIGH · CVSS 7.5 EPSS 0.94% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2021-3769
Severity
HIGH
CVSS
7.5
EPSS
0.94%
GitHub

Original NVD Description

# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P` on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability can be exploited. **Fixed in**: [b3ba9978](https://github.com/ohmyzsh/ohmyzsh/commit/b3ba9978). **Impacted areas**: - `pygmalion` theme. - `pygmalion-virtualenv` theme. - `refined` theme.