github.com/zarf-dev/zarf
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write | github.com/defenseunicorns/zarfgithub.com/zarf-dev/zarf | Go | High | Fix reported | |
| Zarf's symlink targets in archives are not validated against destination directory | github.com/zarf-dev/zarf/src/pkg/archivegithub.com/zarf-dev/zarf | Go | High | Fix reported |