CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
2 CVEs tagged to lfprojects / zarf — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf pa…
Zarf is an Airgap Native Packager Manager for Kubernetes. From version 0.54.0 to before version 0.73.1, a path traversal vulnerability in archive extraction allows a specifically…