Charmbracelet Wish vulnerabilities

• charmbracelet wish Charmbracelet Wish 2.0.5 Path Traversal via git Middleware CVE-2026-53980 8.6 HighNovember 6, 2026
• charm wish Wish has SCP Path Traversal that allows arbitrary file read/write CVE-2026-41589 Fix available 9.6 CriticalApril 18, 2026