AIKIDO-2026-11115

TL;DR

The remove action in degit.json resolves each requested path with path.resolve against the scaffold destination but, before the fix, did not verify the result stayed inside that directory. A repository can list traversal segments such as ../sibling so degit deletes files or directories outside the cloned tree after scaffolding. That enables arbitrary local deletion when a user runs degit on an untrusted template. The fix normalizes the destination root, rejects escaped paths with a warning, and skips the delete.