Py7zr Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Py7zr Project records in CISA KEV

No Py7zr Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Py7zr 1 record MEDIUM

Records

1 record in Py7zr · all components

TI-2022-22085 CVE-2022-44900 · GHSA-m8xw-9x5x-6vh3

A directory traversal vulnerability in the SevenZipFile.extractall() function of the…

MEDIUM 52

A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02444 Published 2022-12-06 Fixed in 0.20.1 CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0