Vulert records 5 vulnerabilities for tmux in OSS-Fuzz: 0 critical, 0 high, 5 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

How many vulnerabilities does tmux have?

5 vulnerabilities are recorded for tmux in the OSS-Fuzz ecosystem: 0 critical, 0 high, 5 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new tmux vulnerabilities disclosed?

3 vulnerabilities were recorded for tmux in the last 12 months, and the oldest entry in this database dates to 19 Feb 2021. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of tmux are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor tmux for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at https://vulert.com/scanner and Vulert keeps checking the tmux version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.

Vulnerability Database · OSS-Fuzz · Package report

tmux: vulnerability history, versions and safety

tmux is a package in the OSS-Fuzz ecosystem. Vulert records 5 vulnerabilities for it across 5 affected ranges, from Feb 2021 to Sep 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

5 vulnerabilities recorded M5

0 with no fix published

Every vulnerability has a patched version to move to.

3 in the last 12 months

Most recent disclosure 28 Sep 2026.

See the disclosure history →

0 malicious-package vulnerabilities

No published version shipped hostile code.

See all tmux vulnerabilities

Vulert verdict on tmux i

Updated on 23 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 28 Sep 2026. Apply the fixes listed below and you are clear.

Long-term outlook: usable, with an upgrade 5 vulnerabilities on record across 5 years, 3 in the last year.

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

Vulnerabilities on record 5 over 5 years · 3 in the last year i
Latest disclosure 28 Sep 2026 i
Highest CVSS n/a i
With no published fix 0 i

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

Scan your app free →

01 Versions

Which versions are affected

Vulert records these vulnerabilities by affected range rather than by individual release, so these are the ranges to check. Filter above to find the version you run.

Affected range	Vulnerabilities
from 7620c03b7278ed631efa98455c5e116538c23ed7 up to 43e2942fa05fed779324fd379bb1577ef35c158d (exclusive)	1
from ce5de765929ea38b68e3fd6c26e554ab0c1e09b1 up to 11e404ca3c80893f59b1001f000c9390216c7e7a (exclusive)	1
from 67960dcc9ad3ed0bde23c1a7c8202c9b2aeec34f up to 6d0828b81cd39362869155dbea0143b66efe4e21 (exclusive)	1
from 7620c03b7278ed631efa98455c5e116538c23ed7 up to 3badbc50e0d1c45ebfca2d2d1fad059a055584a5 (exclusive)	1
from be75a67b1fe182fab9868d15ed618557555f6a0e up to 3a5df8780f5fc863655c8610c11e57a3ec7ee3e6 (exclusive)	1

02 Disclosure history

How often vulnerabilities are recorded

2021 1
2022 1
2026 3

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 3 of the 5 were recorded in the last 12 months.

Other ways into the data

03 Vulnerabilities

Recorded vulnerabilities for tmux

Vulnerability	Severity	Fixed version ↓	Disclosed ↓
Heap-buffer-overflow in input_osc_parse_colour in tmux	N/A medium	11e404ca3c80893f59b1001f000c9390216c7e7a	19 Feb 2021
Stack-buffer-overflow in input_osc_52 in tmux	N/A medium	6d0828b81cd39362869155dbea0143b66efe4e21	13 Jun 2022
Heap Buffer Overflow Vulnerability in tmux: Critical Security Flaw	N/A medium	43e2942fa05fed779324fd379bb1577ef35c158d	03 Apr 2026
Heap Buffer Overflow Vulnerability in Tmux: Critical Security Flaw Detected	N/A medium	3badbc50e0d1c45ebfca2d2d1fad059a055584a5	05 Apr 2026
Heap Buffer Overflow Vulnerability in tmux: Critical Screen Resize Issue	N/A medium	3a5df8780f5fc863655c8610c11e57a3ec7ee3e6	28 Sep 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315