—Go
GO-2026-5542· CVE-2026-40090, GHSA-pj97-4p9w-gx3qPath traversal via malicious package name in github.com/zarf-dev/zarf
Modified: 7/23/2026
package
Go/github.com/defenseunicorns/zarf
pkg:go/github.com/defenseunicorns/zarf
package
pkg:go/github.com/defenseunicorns/zarf
Path traversal via malicious package name in github.com/zarf-dev/zarf
Modified: 7/23/2026