- CVE-2022-0213: bound the space appended to the window status line so it cannot be written past the end of NameBuff - CVE-2024-43802: check that the typeahead buffer has room before advancing the offset when flushing mapped characters - CVE-2026-28422: account for the byte length of a multi-byte fill character when sizing the status line buffer and when padding item groups - CVE-2022-0351: limit expression recursion depth so a deeply nested condition cannot exhaust the stack