Skip to content
OpenAdvisories

Product · charmbracelet

wish

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-53980

    Charmbracelet Wish 2.0.5 Path Traversal via git Middleware

    Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware (charm.land/wish/v2) that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-s…

    charmbracelet wish