HIGHcrates.io
GHSA-74p7-6h78-gw8pskillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery
Modified: 6/22/2026
package
pkg:crates.io/skillctl
skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery
Modified: 6/22/2026
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
Modified: 6/19/2026