All products

magic-wormhole

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Magic Wormhole: "wormhole receive" allows arbitrary local file overwriteCVE-2026-32116 · GHSA-4G4C-MFQG-PJ8RVersion ranges need review. magic-wormhole PyPI High Fix reported
Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversedCVE-2026-42448 · GHSA-CF92-GFCW-6V53Version ranges need review. magic-wormhole PyPI Low Fix reported