37 matches found
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-23879 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
dadmatools (>=1.1.1.dev1, <=1.5.0), dadmatools-light (1.1.0) potentially affected by CVE-2026-23879 via py7zr (0.17.2)
py7zr PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - dadmatools =1.1.1.dev1, =1.5.0 - dadmatools-light 1.1.0 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
activity-browser (>=3.0.0b966, <=3.0.0b202610031934), aitraining (>=0.0.0, <=0.8.37.dev0) +32 more potentially affected by CVE-2026-23879 via py7zr (0.22.0)
py7zr PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - activity-browser =3.0.0b966, =0.0.0, =0.9.0, =0.8.26, =0.2.1, =0.9.0, =1.1.0, =2.1.7, =1.3.2, =0.0.71, =1.0.7, =0.0.15, =0.2.4, =0.3.8 and more Sourc...
hydrodata (>=0.1.3, <=0.2.0) potentially affected by CVE-2026-23879 via py7zr (0.4.4)
py7zr PYPI version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - hydrodata =0.1.3, =0.2.0 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
prenlp (>=0.0.10, <=0.0.13) potentially affected by CVE-2026-23879 via py7zr (0.5.0b5)
py7zr PYPI version 0.5.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - prenlp =0.0.10, =0.0.13 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
aqtinstall (>=0.7.4, <=0.7.9) potentially affected by CVE-2026-23879 via py7zr (0.5.5)
py7zr PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - aqtinstall =0.7.4, =0.7.9 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
p5core (>=0.1.0, <=0.7.0) potentially affected by CVE-2026-23879 via py7zr (0.11.3)
py7zr PYPI version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - p5core =0.1.0, =0.7.0 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
bin-package-manager (>=1.0.0, <=2.2.10), bloark (>=2.0.1, <=2.3.3) +17 more potentially affected by CVE-2026-23879 via py7zr (0.20.8)
py7zr PYPI version 0.20.8 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - bin-package-manager =1.0.0, =2.0.1, =0.9.4, =0.2.0, =1.0.2, =3.0.0, =0.3.3, =0.2.4, =0.2.2, =1.2.5, =0.3.0, =2.1.1, =4.5.2, =5.6.2 and more Source...
stpstone (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-23879 via py7zr (0.16.2)
py7zr PYPI version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - stpstone =0.1.0, =1.0.0 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...
CVE-2026-23879
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...
SUSE CVE-2026-23879
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...
atomicshop (>=3.5.4, <=3.14.24), codex (>=1.8.0, <=1.8.11) +14 more potentially affected by CVE-2026-23879 via py7zr (>=1.0.0rc3, <=1.1.0)
py7zr PYPI version =1.0.0rc3, =3.5.4, =1.8.0, =2.0.3, =1.0.0, =0.3.0, =1.0.1, =0.1.4, =2026.6.0b1, =0.0.0.dev0, =1.3.3, =0.9.429, =2.4.0, =0.1.4, =0.3.1 - rebotics-sdk 0.31.1 and more Source cves: CVE-2026-23879 Source advisory: SNYK:PYTHON-PY7ZR-17391447...
dadmatools (>=1.1.1.dev1, <=1.5.0), dadmatools-light (1.1.0) potentially affected by CVE-2026-23879 via py7zr (0.17.2)
py7zr PYPI version 0.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - dadmatools =1.1.1.dev1, =1.5.0 - dadmatools-light 1.1.0 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
hydrodata (>=0.1.3, <=0.2.0) potentially affected by CVE-2026-23879 via py7zr (0.4.4)
py7zr PYPI version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - hydrodata =0.1.3, =0.2.0 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
stpstone (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-23879 via py7zr (0.16.2)
py7zr PYPI version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - stpstone =0.1.0, =1.0.0 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
prenlp (>=0.0.10, <=0.0.13) potentially affected by CVE-2026-23879 via py7zr (0.5.0b5)
py7zr PYPI version 0.5.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - prenlp =0.0.10, =0.0.13 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
aqtinstall (0.9.2) potentially affected by CVE-2026-23879 via py7zr (0.7.4)
py7zr PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - aqtinstall 0.9.2 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
aqtinstall (0.9.8) potentially affected by CVE-2026-23879 via py7zr (0.10.2)
py7zr PYPI version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - aqtinstall 0.9.8 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
CVE-2026-23879
creationtimestamp| type| source ---|---|--- 2026-06-19 09:31:59+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7 2026-06-24 22:16:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d 2026-06-24 23:14:35+00:00|...
