- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 high
- Registry
- pkg.go.dev
Advisories 1
- CVE-2026-40090High 7.1
Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write
Affected: from 0.23.0.