zarf-dev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| zarf | 2 | – | Apr 14, 2026 |
Exploited and recent CVEs
- CVE-2026-40090 Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write 0.3%
- CVE-2026-29064 Zarf: Symlink targets in archives are not validated against destination directory 0.3%