3 matches found
luigi Arbitrary File Write via Archive Extraction (Zip Slip)
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS6.8AI score0.01096EPSS
SaveExploits0References7Affected Software1
PYSEC-2024-159
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS7AI score0.01096EPSS
SaveExploits0References5Affected Software1
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS8.5AI score0.01096EPSS
SaveExploits0References5
20