Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-3479

Опубликовано: 31 мар. 2026
Источник: msrc
EPSS Низкий

Описание

pkgutil.get_data() does not enforce documented restrictions

EPSS

Процентиль: 15%
0.00238
Низкий

Связанные уязвимости

ubuntu
6 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

CVSS3: 3.3
redhat
6 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

nvd
6 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

debian
6 месяцев назад

DISPUTED: The project has clarified that the documentation was incorre ...

suse-cvrf
5 месяцев назад

Security update for python

EPSS

Процентиль: 15%
0.00238
Низкий