Lucene search
+L

5 matches found

OSV
OSV
•added 2026/08/27 5:21 p.m.•14 views

PYSEC-2026-3800

opensslencrypt pip: openssl-encrypt versions before 1.4.9 contain a path traversal flaw in PluginSandbox.issafepath, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READFILES permission could read or write another plugin's directory that merely shares...

8.7CVSS5.7AI score0.00261EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/27 5:21 p.m.•17 views

PYSEC-2026-3800

opensslencrypt pip: openssl-encrypt versions before 1.4.9 contain a path traversal flaw in PluginSandbox.issafepath, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READFILES permission could read or write another plugin's directory that merely shares...

8.7CVSS5.7AI score0.00261EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/27 2:51 p.m.•6 views

CVE-2026-81716 openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal

opensslencrypt pip: openssl-encrypt versions before 1.4.9 contain a path traversal flaw in PluginSandbox.issafepath, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READFILES permission could read or write another plugin's directory that merely shares...

8.7CVSS5.7AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•23 views

PT-2026-82611

openssl encrypt pip: openssl-encrypt versions before 1.4.9 contain a path traversal flaw in PluginSandbox. is safe path, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READ FILES permission could read or write another plugin's directory that merely...

8.7CVSS5.7AI score0.00261EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•3 views

CVE-2026-81716: Improper Limitation of a Pathname to a Restricted Directory

opensslencrypt pip: openssl-encrypt versions before 1.4.9 contain a path traversal flaw in PluginSandbox.issafepath, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READFILES permission could read or write another plugin's directory that merely shares...

8.7CVSS5.7AI score0.00261EPSS
SaveExploits0References4
Rows per page
Query Builder