Sign in Sign up

charm.land/wish/v2

View on Go

Activity

Latest release: 1d ago
Total releases: 4
Cadence: ~39 days
Last 12 months: 4

Details

First release: Mar 09, 2026

Releases

Version	Released
`v2.0.3` patch	Jul 31, 2026
`v2.0.2` patch	Jul 30, 2026
`v2.0.1` patch	Apr 17, 2026
`v2.0.0` initial 1 CVE	Mar 09, 2026

Dependencies (13)

Depends on

v2.0.3

charm.land/bubbletea/v2 v2.0.8
charm.land/log/v2 v2.0.0
charm.land/ssh v0.4.2
github.com/charmbracelet/colorprofile v0.4.3
github.com/charmbracelet/keygen v0.5.4
github.com/charmbracelet/x/xpty v0.1.4
github.com/go-git/go-git/v5 v5.19.2
github.com/google/go-cmp v0.7.0
github.com/hashicorp/golang-lru/v2 v2.0.7
github.com/matryer/is v1.4.1

1–10 of 13

Used by

6

Supply-chain exposure

6 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (1)

CVE-2026-41589 GO-2026-5762 GHSA-xjvp-7243-rg9h Jul 07, 2026

Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish

Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish

Fixed in

2.0.1

References

https://github.com/charmbracelet/wish/security/advisories/GHSA-xjvp-7243-rg9h
https://github.com/charmbracelet/wish/releases/tag/v2.0.1

Updated Jul 07, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

patch 3

4 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More