ZA
Vendor
zarf-dev
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40090 | ZA zarf zarf-dev | 7.1 | Apr 14 | Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write |
| CVE-2026-29064 | ZA zarf zarf-dev | 8.2 | Mar 6 | Zarf: Symlink targets in archives are not validated against destination directory |