Vim Security Vulnerabilities Fixed in 9.2.1309

Vim 9.2.1309 fixes two Vim security vulnerabilities disclosed on November 8, 2026: a heap buffer overflow triggered by a crafted spell file, and an insecure socket directory in the client-server backend. I explain both flaws, their severity ratings, the affected versions, and the single upgrade that covers them both today. Weiterlesen: Vim Security Vulnerabilities Fixed in 9.2.1309