wish vulnerabilities

2 known vulnerabilities in wish from Charmbracelet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  wish: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-53980Nov 6, 2026Charmbracelet

  Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware (charm.land/wish/v2) that allows authenticated SSH users to escape the configured repository directory by supplying crafted repo paths that bypass a flawed forward-sl

• 9.6 Critical severity

  wish: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-41589May 7, 2026Charmbracelet

  Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A malicious SCP client can read arbitrary files from the server,