Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-3479

Опубликовано: 31 мар. 2026
Источник: msrc
EPSS Низкий

Описание

pkgutil.get_data() does not enforce documented restrictions

EPSS

Процентиль: 15%
0.00238
Низкий

Связанные уязвимости

ubuntu
5 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

CVSS3: 3.3
redhat
5 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

nvd
5 месяцев назад

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

debian
5 месяцев назад

DISPUTED: The project has clarified that the documentation was incorre ...

suse-cvrf
4 месяца назад

Security update for python

EPSS

Процентиль: 15%
0.00238
Низкий