iTerm2 vulnerabilities

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new feature added in version 3.0.0 results in potential information disclosure by sending text as an unencrypted DNS query.

iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the privileges of the logged-in user by inducing the user to open a crafted URL. Percent-encoded NUL characters survive input sanitization and are converted to whitespace during command-line parsing, allowing injection of the -P option to select an attacker-controlled pager.

An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information.