TI-2026-40110 CVE-2026-55569 · GHSA-mf5c-hw34-4hpp
aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory
Priority MEDIUM 62
aqua is a declarative command-line version manager written in Go.