Lucene search
+L

25 matches found

OSV
OSV
•added 2026/07/07 2:34 p.m.•14 views

PYSEC-2026-1848 python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS5.9AI score0.021EPSS
SaveExploits1References7
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•26 views

python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS5.9AI score0.021EPSS
SaveExploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/31 12:00 a.m.•4 views

RHEL 8 : libarchive (RHSA-2025:14810)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14810 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...

7.8CVSS6.6AI score0.00444EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2025/08/20 8:29 a.m.•16 views

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

7.8CVSS6.7AI score0.00444EPSS
SaveExploits2References2
OSV
OSV
•added 2025/05/13 12:00 a.m.•11 views

ALSA-2025:7510 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

4CVSS7AI score0.0025EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/12/12 3:33 a.m.•21 views

python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

6.9AI score0.021EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/12/12 3:33 a.m.•17 views

GHSA-75MX-HW5Q-PVX3 python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS8.7AI score0.021EPSS
SaveExploits1References5
NVD
NVD
•added 2024/12/12 2:08 a.m.•24 views

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS0.021EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-55587: Improper Limitation of a Pathname to a Restricted Directory

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS5.8AI score0.021EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•10 views

python-libarchive 安全漏洞

python-libarchive is a Libarchive wrapper for Python open-sourced by SmartFile. A security vulnerability exists in python-libarchive version 4.2.1, which stems from allowing directory traversal of ZipFile.extractall and ZipFile.extract in a zip.py extraction...

8.8CVSS6.5AI score0.021EPSS
SaveExploits1References3
Snyk
Snyk
•added 2024/12/11 7:47 p.m.•9 views

Directory Traversal

Overview python-libarchive is an A libarchive wrapper for Python supporting password protection. Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization through the ZipFile, extract and extractall methods. An attacker can create arbitrary files o...

8.8CVSS7.7AI score0.021EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/12/11 12:00 a.m.•33 views

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

0.021EPSS
SaveExploits1References3
CVE
CVE
•added 2024/12/11 12:00 a.m.•89 views

CVE-2024-55587

The python-libarchive library (versions 4.2.1 and earlier ) contains a directory traversal vulnerability within the zip.py file. Specifically, the ZipFile.extractall and ZipFile.extract functions fail to properly validate paths, allowing an attacker to create files outside the intended target dir...

6.7AI score0.021EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/12/11 12:00 a.m.•10 views

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

7AI score0.021EPSS
SaveExploits1References3
OSV
OSV
•added 2024/12/11 12:00 a.m.•11 views

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

8.8CVSS6.8AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/10 1:28 p.m.•62 views

Low: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

9.8CVSS6.7AI score0.02445EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/05/16 9:04 a.m.•107 views

Low: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.7AI score0.02445EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2023/05/16 12:00 a.m.•56 views

Low: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

9.8CVSS6.5AI score0.02445EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/05/09 10:10 a.m.•48 views

Low: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.7AI score0.02445EPSS
SaveExploits0References3
OSV
OSV
•added 2023/05/09 12:00 a.m.•51 views

ALSA-2023:2532 Low: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

9.8CVSS7.9AI score0.02445EPSS
SaveExploits0References4
Rows per page
Query Builder