CVE-2026-77091

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091

Commvault DataCube contained a path traversal flaw that could bypass security feature enforcement . The CVSS 4.0 score is 8.5 (HIGH) , with a local attack vector requiring low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability of the vulne...

CVE-2026-77091 DataCube Security Feature Bypass

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091 DataCube Security Feature Bypass

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

EUVD-2026-72723

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091: Improper Limitation of a Pathname to a Restricted Directory

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

PT-2026-87044

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8212 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8212 Source advisory: OSV:GHSA-R5M4-5VWW-W9F5...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8213 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8213 Source advisory: OSV:PYSEC-2026-2157...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8088 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8088 Source advisory: OSV:GHSA-J3F5-RW74-G4RV...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8087 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8087 Source advisory: OSV:GHSA-H9RH-5FFH-H669...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8088 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8088 Source advisory: OSV:PYSEC-2026-2156...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8087 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8087 Source advisory: OSV:PYSEC-2026-2155...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8086 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8086 Source advisory: OSV:PYSEC-2026-2154...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8084 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8084 Source advisory: OSV:PYSEC-2026-2153...

crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

cellxgene-schema (5.3.0), crl-datacube (0.1.56) potentially affected by CVE-2026-23528 via distributed (2024.12.0)

distributed PYPI version 2024.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellxgene-schema 5.3.0 - crl-datacube 0.1.56 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

datacube-ows (>=1.8.19, <=1.8.20) potentially affected by CVE-2026-23528 via distributed (2023.4.0)

distributed PYPI version 2023.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - datacube-ows =1.8.19, =1.8.20 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

datacube-ows (>=1.8.19, <=1.8.20) potentially affected by CVE-2026-23528 via distributed (2023.4.0)

distributed PYPI version 2023.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - datacube-ows =1.8.19, =1.8.20 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...