Wish (< 2.0.5)

Charmbracelet wish contains a path traversal vulnerability in the git middleware that allows authenticated SSH users to access arbitrary repositories outside the intended root directory.