All products

github.com/zarf-dev/zarf/src/pkg/archive

Go · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Zarf's symlink targets in archives are not validated against destination directoryCVE-2026-29064 · GHSA-HCM4-6HPJ-VGHM github.com/zarf-dev/zarf/src/pkg/archivegithub.com/zarf-dev/zarf Go High Fix reported