Vulners
Lucene search
3 matches found
luigi Arbitrary File Write via Archive Extraction (Zip Slip)
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS6.8AI score0.14207EPSS
Exploits0References7Affected Software1
PYSEC-2024-159
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS7AI score0.14207EPSS
Exploits0References4Affected Software1
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS8.5AI score0.14207EPSS
Exploits0References5
20