PT-2026-55085

Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get resource method in taipy/gui/extension/library.py that allows unauthenticated attackers to escape the intended module directory by exploiting an incomplete path containment check using...

bomiot (>=0.2.86, <=0.8.5), cashd (>=0.2.0, <=0.3.4.post1) +9 more potentially affected by CVE-2026-42304 via twisted (24.7.0)

twisted PYPI version 24.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bomiot =0.2.86, =0.2.0, =0.7.1, =0.3.1, =0.8.1, =4.0.0, =4.0.0, =0.1.0, =0.6.2, =0.1.0, =0.0.1, =0.1.5 Source cves: CVE-2026-42304 Source advisor...