Lucene search
+L

5 matches found

SUSE Linux
SUSE Linux
added 2026/08/12 12:05 p.m.7 views

Security update for python3

This update for python3 fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1703: files may be extracted outside the installation directory when installing and...

8.7CVSS6.1AI score0.00637EPSS
SaveExploits2References46
SUSE CVE
SUSE CVE
added 2026/02/03 12:24 a.m.10 views

SUSE CVE-2026-1703

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

3.1CVSS5.4AI score0.0039EPSS
SaveExploits1References11
OSV
OSV
added 2026/02/02 3:16 p.m.12 views

AZL-76599 CVE-2026-1703 affecting package python3 3.12.9-9

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS5.7AI score0.0039EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 2:43 p.m.9 views

CVE-2026-1703

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS5.4AI score0.0039EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/02 2:43 p.m.10 views

CVE-2026-1703 Limited path traversal when installing wheel archives

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...

2CVSS6.3AI score
SaveExploits0References7
Rows per page
Query Builder