magic-wormhole vulnerabilities
2 published CVEs name magic-wormhole among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42448
wormhole receive, with --output pointing at an existing directory can be path-traversed
magic-wormhole · magic-wormhole
Low3.5 - CVE-2026-32116
Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
magic-wormhole · magic-wormhole
High8.2