CVE-2026-53980

Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware charm.land/wish/v2 that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-slash-count containment check in...