The vulnerability arises because spaceship‑prompt does not sanitize control characters in project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI and OSC escape sequences that are printed by the terminal, allowing them to rewrite window titles, alter prompt text, or otherwise control what the user sees. The flaw is an input validation issue (CWE‑150) and does not lead to code execution, data exfiltration, or other system compromise.

Versions of spaceship‑prompt up through and including 4.22.5 are affected. Any installation that uses the prompt in a zsh environment and renders project manifest data for a project directory is vulnerable. Later releases beyond 4.22.5 are not impacted.

The CVSS score of 4.8 indicates a moderate impact. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no widespread exploitation reported. Based on the description, the likely attack vector requires a local attacker to place a crafted manifest in a directory and for the victim to navigate to that directory while using zsh; it only manipulates console output and does not compromise confidentiality, integrity, or availability of the system.