Launchpad.net

CVE 2018-0502

An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an execve call to a program named on the second line.

See the CVE page on Mitre.org for more details.