Количество 5
Количество 5
CVE-2026-3087
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
CVE-2026-3087
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
CVE-2026-3087
shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
CVE-2026-3087
If `shutil.unpack_archive()` is given a ZIP archive with an absolute W ...
GHSA-7r27-jhmm-vmp6
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3087 If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-3087 If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | 1% Низкий | 2 месяца назад | |
| CVE-2026-3087 If `shutil.unpack_archive()` is given a ZIP archive with an absolute W ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-7r27-jhmm-vmp6 If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу