When resolving command names against PATH directories for autocompletion and glob-style lookups, candidate paths are now checked with a new async guard that rejects empty paths, certain path shapes, and paths that resolve to symlinks pointing outside an allowed area, before treating them as candidate executables.
PATH executable resolution now skips symlinked/broken entries
PATH lookup for command completion now skips broken or unsafe symlinked executables.
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
Bug FixesKind: in v2.1.260,
Bug FixesSection of the release