SUSE CVE-2022-26184

Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS...

ekrhizoc (>=0.0.5, <=0.1.0), fhmake (>=2020.1.0, <=2020.1.1) +6 more potentially affected by CVE-2022-26184 via poetry (>=1.0.0, <=1.1.5)

poetry PYPI version =1.0.0, =0.0.5, =2020.1.0, =0.1.4, =5.2.0, =0.1.0, =0.1.3, =0.0.1, =0.1.4 Source cves: CVE-2022-26184 Source advisory: OSV:GHSA-XR2C-5W89-63PV...

kkt (0.1.3) potentially affected by CVE-2022-26184 via poetry (0.12.17)

poetry PYPI version 0.12.17 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - kkt 0.1.3 Source cves: CVE-2022-26184 Source advisory: OSV:GHSA-XR2C-5W89-63PV...

ekrhizoc (>=0.0.5, <=0.1.0), fhmake (>=2020.1.0, <=2020.1.1) +6 more potentially affected by CVE-2022-26184 via poetry (>=1.0.0, <=1.1.5)

poetry PYPI version =1.0.0, =0.0.5, =2020.1.0, =0.1.4, =5.2.0, =0.1.0, =0.1.3, =0.0.1, =0.1.4 Source cves: CVE-2022-26184 Source advisory: GHSA-XR2C-5W89-63PV...

kkt (0.1.3) potentially affected by CVE-2022-26184 via poetry (0.12.17)

poetry PYPI version 0.12.17 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - kkt 0.1.3 Source cves: CVE-2022-26184 Source advisory: OSV:PYSEC-2022-234...

ekrhizoc (>=0.0.5, <=0.1.0), fhmake (>=2020.1.0, <=2020.1.1) +6 more potentially affected by CVE-2022-26184 via poetry (>=1.0.0, <=1.1.5)

poetry PYPI version =1.0.0, =0.0.5, =2020.1.0, =0.1.4, =5.2.0, =0.1.0, =0.1.3, =0.0.1, =0.1.4 Source cves: CVE-2022-26184 Source advisory: OSV:PYSEC-2022-234...

UBUNTU-CVE-2022-26184

Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS...

ekrhizoc (>=0.0.5, <=0.1.0), fhmake (>=2020.1.0, <=2020.1.1) +6 more potentially affected by CVE-2022-26184 via poetry (>=0.12.17, <=1.1.5)

poetry PYPI version =0.12.17, =0.0.5, =2020.1.0, =0.1.3, =5.2.0, =0.1.0, =0.1.3, =0.0.1, =0.1.4 Source cves: CVE-2022-26184 Source advisory: MEND:CVE-2022-26184...

CVE-2022-26184

CVE-2022-26184 affects Poetry v1.1.9 and earlier. The issue is an untrusted search path that causes Poetry commands to behave unexpectedly when run in directories containing malicious content on Windows. The incident is documented with high CVSS impacts (confidentiality, integrity, availability) ...