All products

github.com/defenseunicorns/zarf

Go · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File WriteCVE-2026-40090 · GHSA-PJ97-4P9W-GX3QVersion ranges need review. github.com/defenseunicorns/zarfgithub.com/zarf-dev/zarf Go High Fix reported