TI-2026-30737 CVE-2026-42448 · GHSA-cf92-gfcw-6v53
wormhole receive, with --output pointing at an existing directory can be path-traversed
Priority LOW 16
Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another.