Vendor
Charmbracelet wish contains a path traversal vulnerability in the git middleware that allows authenticated SSH users to access arbitrary repositories outside the intended root directory.