github.com/defenseunicorns/zarf vulnerabilities (Go)

1 vulnerability.

• github.com/defenseunicorns/zarf Go Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write CVE-2026-40090 Fix available 7.1 HighApril 14, 2026