CVE-2022-47583: Mintty Project Mintty

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.

Affected products

• Mintty Project Mintty: before 3.6.3 (fixed in 3.6.3)

Published 2023-10-19. Last modified 2026-06-17.