Github.Com Zarf-Dev Zarf Src Pkg Archive vulnerabilities

1 known vulnerability affecting github.com/zarf-dev_zarf_src_pkg_archive.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2026-29064HIGH≥ 0.54.0, < 0.73.12026-03-06

CVE-2026-29064 [HIGH] CWE-22 Zarf's symlink targets in archives are not validated against destination directory Zarf's symlink targets in archives are not validated against destination directory ### Summary A path traversal vulnerability in archive extraction allows a specifically crafted Zarf package to create symlinks pointing outside the destination directory, enabling arbitrary file read or write on the system processing the package. ### What users should do Upgrade immediately to version