Skip to content
OpenAdvisories

Package · Go

github.com/ddev/ddev

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-32885

    DDEV has ZipSlip path traversal in tar and zip archive extraction

    DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` functions in `pkg/archive/archive.go`. Downloads and extracts archives from re…

    ddev ddev github.com/ddev/ddev Go