github.com/zarf-dev/zarf/src/pkg/archive vulnerabilities (Go)

1 vulnerability.

• github.com/zarf-dev/zarf/src/pkg/archive Go Zarf: Symlink targets in archives are not validated against destination directory CVE-2026-29064 Fix available 8.2 HighMarch 6, 2026