CVE-2026-29780

🗓️ 07 Mar 2026 15:22:43Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 20 Views

Path traversal in eml_parser official example script allows arbitrary file write outside the output directory; fixed in version 2.0.1.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2026-29780	7 Mar 202615:22	–	attackerkb
Circl	CVE-2026-29780	4 Mar 202615:33	–	circl
CNNVD	eml_parser 路径遍历漏洞	7 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write	7 Mar 202615:22	–	cvelist
Github Security Blog	eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write	5 Mar 202600:16	–	github
NVD	CVE-2026-29780	7 Mar 202616:15	–	nvd
OSV	CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write	7 Mar 202615:22	–	osv
OSV	GHSA-389R-RCCM-H3H5 eml_parser: Path Traversal in Official Example Script Leads to Arbitrary File Write	5 Mar 202600:16	–	osv
OSV	PYSEC-2026-2148	7 Mar 202616:15	–	osv
Positive Technologies	PT-2026-23443	5 Mar 202600:00	–	ptsecurity

NVD

Vulners

Node

govcert.lu eml_parserRange<2.0.1python

[
  {
    "vendor": "GOVCERT-LU",
    "product": "eml_parser",
    "versions": [
      {
        "version": "< 2.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/GOVCERT-LU/eml_parser/security/advisories/GHSA-389r-rccm-h3h5
github	www.github.com/GOVCERT-LU/eml_parser/issues/88
github	www.github.com/GOVCERT-LU/eml_parser/commit/99af03a09a90aaaaadd0ed2ffb5eea46d1ea2cc9

17 Jun 2026 10:29Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00237

SSVC

CWE-22