2 matches found
CVE-2026-34591 affecting package poetry for versions less than 1.8.5-1
CVE-2026-34591 affecting package poetry for versions less than 1.8.5-1. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2026-41140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path...