CVE-2026-32116
2 advisories.
PyPI/magic-wormhole CVE-2026-32116: high
Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
Action: Upgrade magic-wormhole to 0.23.0 or later.
pip install magic-wormhole==0.23.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.21.0 | 0.23.0 | - |
Fixed versions
| 0.23.0 |
Sources
- osv: GHSA-4g4c-mfqg-pj8r
- https://github.com/magic-wormhole/magic-wormhole/security/advisories/GHSA-4g4c-mfqg-pj8r
- https://nvd.nist.gov/vuln/detail/CVE-2026-32116
- https://github.com/magic-wormhole/magic-wormhole
CVE-2026-32116 · published · modified · JSON
PyPI/magic-wormhole CVE-2026-32116: unknown
Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
Action: Upgrade magic-wormhole to 0.23.0 or later.
pip install magic-wormhole==0.23.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.21.0 | 0.23.0 | - |
Fixed versions
| 0.23.0 |
Sources
- osv: PYSEC-2026-2615
- https://github.com/magic-wormhole/magic-wormhole/security/advisories/GHSA-4g4c-mfqg-pj8r
- https://nvd.nist.gov/vuln/detail/CVE-2026-32116
- https://github.com/magic-wormhole/magic-wormhole
- https://pypi.org/project/magic-wormhole
- https://github.com/advisories/GHSA-4g4c-mfqg-pj8r
CVE-2026-32116 · published · modified · JSON