Lucene search
+L

29 matches found

OSV
OSV
added 2026/01/20 12:36 a.m.7 views

CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS5.5AI score0.00527EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2026/01/20 12:36 a.m.8 views

CVE-2026-23949

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS5.4AI score0.00527EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/01/20 12:36 a.m.21 views

CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS0.00527EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the...

8.6CVSS7.3AI score0.00527EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
added 2026/01/13 9:48 p.m.14 views

afipcaeqrdecode (=0.0.15), afw (>=0.0.6 <=0.0.21) +208 more potentially affected by CVE-2026-23949 via jaraco-context (>=5.3.0 <=6.0.2)

jaraco-context PYPI version =5.3.0, =0.0.6, =0.1.0, =0.1.23, =0.0.1, =0.9.5, =1.0.5, =0.1.6, =0.1.0, =0.0.2, =0.1.2, =1.0.1, =1.0.1.9 - azvaultcopy =1.0.0b1 and more Source cves: CVE-2026-23949 Source advisory: OSV:GHSA-58PV-8J8X-9VJ2...

8.6CVSS7.2AI score0.00527EPSS
SaveExploits1
Snyk
Snyk
added 2026/01/13 9:48 p.m.2 views

Directory Traversal

Overview jaraco.context is an Useful decorators and context managers Affected versions of this package are vulnerable to Directory Traversal via the stripfirstcomponent function. An attacker can access or create arbitrary files outside the intended extraction directory by supplying a crafted tar...

8.7CVSS7.5AI score0.00527EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/01/13 9:48 p.m.4 views

EUVD-2026-2019

jaraco.context Has a Path Traversal Vulnerability...

6.3AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/01/13 9:48 p.m.255 views

jaraco.context Has a Path Traversal Vulnerability

Summary There is a Zip Slip path traversal vulnerability in the jaraco.context package affecting setuptools as well, in jaraco.context.tarball function. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The...

8.6CVSS5.7AI score0.00527EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.6 views

PT-2026-3523

Name of the Vulnerable Software and Affected Versions jaraco.context versions prior to 6.1.0 Description jaraco.context, a software package providing decorators and context managers, contains a path traversal issue in the jaraco.context.tarball function. The issue allows attackers to extract file...

8.6CVSS5.3AI score0.00527EPSS
SaveExploits1References40
Rows per page
Query Builder