Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
High severity
GitHub Reviewed
Published
Mar 12, 2026
in
magic-wormhole/magic-wormhole
•
Updated Mar 13, 2026
Give feedback on Dependabot alerts