Lucene search
+L

31 matches found

Vulnrichment
Vulnrichment
•added 2026/01/20 12:36 a.m.•11 views

CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS7.5AI score0.00618EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/01/20 12:36 a.m.•34 views

CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS0.00618EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2026/01/20 12:36 a.m.•34 views

CVE-2026-23949

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS7.5AI score0.00618EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/20 12:36 a.m.•18 views

CVE-2026-23949

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS7.5AI score0.00618EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/01/20 12:36 a.m.•16 views

CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS5.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/01/20 12:36 a.m.•15 views

CVE-2026-23949

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...

8.6CVSS7.5AI score0.00618EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-23949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the...

8.6CVSS7.5AI score0.00618EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/01/13 9:48 p.m.•9 views

EUVD-2026-2019

jaraco.context Has a Path Traversal Vulnerability...

6.3AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/01/13 9:48 p.m.•3 views

Directory Traversal

Overview jaraco.context is an Useful decorators and context managers Affected versions of this package are vulnerable to Directory Traversal via the stripfirstcomponent function. An attacker can access or create arbitrary files outside the intended extraction directory by supplying a crafted tar...

8.7CVSS7.6AI score0.00618EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/01/13 9:48 p.m.•274 views

jaraco.context Has a Path Traversal Vulnerability

Summary There is a Zip Slip path traversal vulnerability in the jaraco.context package affecting setuptools as well, in jaraco.context.tarball function. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The...

8.6CVSS7.8AI score0.00618EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•15 views

PT-2026-3523

Name of the Vulnerable Software and Affected Versions jaraco.context versions prior to 6.1.0 Description jaraco.context, a software package providing decorators and context managers, contains a path traversal issue in the jaraco.context.tarball function. The issue allows attackers to extract file...

8.6CVSS7.6AI score0.00618EPSS
SaveExploits1References42
Rows per page
Query Builder