CVE-2026-53980

Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware charm.land/wish/v2 that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-slash-count containment check in...

CVE-2026-53980

Charmbracelet wish versions prior to 2.0.5 are vulnerable to a path traversal flaw within the git.Middleware() component. The root cause is a flawed forward-slash-count containment check that can be bypassed using crafted repo paths. Authenticated SSH users can exploit this to escape the configur...

EUVD-2026-118276

Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware charm.land/wish/v2 that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-slash-count containment check in...

CVE-2026-53980 Charmbracelet Wish 2.0.5 Path Traversal via git Middleware

Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware charm.land/wish/v2 that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-slash-count containment check in...

CVE-2026-53980: charmbracelet wish: Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware (charm.land/wish/v2) that…

Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware charm.land/wish/v2 that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-slash-count containment check in...