github.com/ddev/ddev
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885 | github.com/ddev/ddev | Go | High | Fix reported | |
| DDEV has ZipSlip path traversal in tar and zip archive extraction | github.com/ddev/ddev | Go | Medium | Fix reported |