Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-cf92-gfcw-6v53
  • PyPI/magic-wormhole
Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed 06 May
  • Fix available
  • Severity - 3.5 (Low)
GHSA-4g4c-mfqg-pj8r
  • PyPI/magic-wormhole
Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite 13 Mar
  • Fix available
  • Severity - 8.2 (High)