Security: magic-wormhole/magic-wormhole
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
wormhole receive, with --output pointing at an existing directory can be path-traversedGHSA-cf92-gfcw-6v53 published
May 5, 2026 by meejahLow -
"wormhole receive" allows arbitrary local file overwriteGHSA-4g4c-mfqg-pj8r published
Mar 12, 2026 by warnerHigh
Learn more about advisories related to magic-wormhole/magic-wormhole in the GitHub Advisory Database