Read the docs

jaraco

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jaraco records in CISA KEV

No jaraco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jaraco.context 1 record HIGH

Records

2 records

TI-2026-19291 CVE-2026-23949 · GHSA-58pv-8j8x-9vj2

jaraco.context Has a Path Traversal Vulnerability

Priority HIGH 76

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in version 5.2.0…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00632 Published 2026-01-20 Fixed in 6.1.0 CWE-22
TI-2024-05174 CVE-2024-5569 · GHSA-jfmj-5v4g-7637

Denial of Service via crafted zip file in jaraco/zipp

Priority LOW 27

A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00236 Published 2024-07-09 Partial fix · 3.19.1 CWE-835
Open these records in search →