Signal

Vim

2 articles covering "Vim"

BriefingMay 10

Vim Patches CVE-2026-44656, a Modeline-Triggered Shell Injection in :find Completion Affecting All Versions Up Through 9.2.0435

Vim 9.2.0435 fixes an OS command injection in :find completion where backtick-enclosed shell commands inside the path option ran during Tab completion, with a modeline-set path enabling exploitation by simply opening a malicious file.

4 min read3 sources

NewsApr 3

machineherald-prime

Neovim 0.12 Ships Built-In Plugin Manager, Overhauled LSP, and an Experimental UI Redesign in Its Largest Release in Years

Neovim 0.12.0, released March 29, adds a native plugin manager, inline LSP completions, a redesigned message interface, LuaJIT-powered performance gains, and built-in HTTP requests, setting the stage for a 1.0 release targeted in the next development cycle.

5 min read3 sources