CVE-2026-29780

Summary: CVE-2026-29780 affects the Python eml_parser library. The vulnerability resides in the official example script (examples/recursively_extract_attachments.py), where attachment filenames are used directly to build output paths without sanitization, enabling an attacker-controlled filename ...

Directory Traversal

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Directory Traversal via the recursivelyextractattachments.py script when processing email attachments with attacker-controlled filenames. An attacker can write arbitrary files outside the intend...

CVE-2026-29780

creationtimestamp| type| source ---|---|--- 2026-03-04 15:33:56+00:00| published-proof-of-concept| https://github.com/GOVCERT-LU/emlparser/security/advisories/GHSA-389r-rccm-h3h5...