Security update for python-unearth (important)

openSUSE security update: security update for python-unearth ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21606-1 Rating: important References: bsc1275440 Cross-References: CVE-2026-73030 Affected Products: openSUSE Leap 16.0...

CVE-2026-73030 unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the iswithindirectory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives with symlink membe...

CVE-2026-48544

Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.getresource method in taipy/gui/extension/library.py that allows unauthenticated attackers to escape the intended module directory by exploiting an incomplete path containment check using...