dye is a portable and respectful color library for shell scripts.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 6, 2026 · NIST NVD

   Detected

   dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1.

2. Jul 24, 2026 · NIST NVD

   Updated

   dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.1.1.

Affected

• cpe mattiebee/dye1.1.0

Sources

• CVE.orgVulnerability recordCVE-2026-35197

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-35197

  dye is a portable and respectful color library for shell scripts. Prior to 1.1.1, certain dye template expressions would result in execution of arbitrary code. This issue was discovered and fixed by dye's author, and is not known to be exploited. This vulnerability is fixed in 1.

  nvd.nist.gov

References

• Vendor Advisory · github.com
• Exploit · mattiebee.io