EUVD-2021-0453

Malware in sbrugna...

The Fuck Arbitrary File Deletion via Path Traversal

The thefuck aka The Fuck is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...

GHSA-8WWF-2644-F8X4 The Fuck Arbitrary File Deletion via Path Traversal

The thefuck aka The Fuck is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...

CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

CVE-2021-34363

CVE-2021-34363 affects the Python package thefuck (aka The Fuck) prior to version 3.31. The root cause is a path traversal flaw in the undo archive operation, which can lead to arbitrary file deletion. Public documentation across multiple feeds confirms this: Arch Linux ASAs and Fedora advisories...

CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...