CVE-2026-41140 affecting package poetry for versions less than 1.8.5-2

CVE-2026-41140 affecting package poetry for versions less than 1.8.5-2. A patched version of the package is available...

CVE-2026-34591 affecting package poetry for versions less than 1.8.5-1

CVE-2026-34591 affecting package poetry for versions less than 1.8.5-1. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2026-41140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path...