Security: ddev/ddev
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Incomplete fix of CVE-2026-32885 - Untar rebases an absolute symlink target into dest for the escape checkGHSA-9hq4-hm3j-jmph published
Sep 2, 2026 by stasadevModerate -
ZipSlip path traversal in tar and zip archive extractionGHSA-x2xq-qhjf-5mvg published
Apr 22, 2026 by stasadevModerate
Learn more about advisories related to ddev/ddev in the GitHub Advisory Database