CVE-2022-41138: Zutty Project Zutty

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

Affected products

• Zutty Project Zutty: before 0.13 (fixed in 0.13)

Published 2022-09-20. Last modified 2026-06-17.