CVE-2020-5253: NetHack before version 3.6.0 allowed malicious use of escaping of char ...
Severity: Critical
CVSS Score: 9.8
NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.