TI-2026-31739 CVE-2026-43637 · GHSA-rrh3-cwwj-g5mg
Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py
Priority MEDIUM 47
Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, abso…