TI-2022-16492 CVE-2022-36069 · GHSA-9xgj-fcgf-x6mw
Poetry Argument Injection vulnerability can lead to local Code Execution
Priority HIGH 67
Poetry is a dependency manager for Python.
python-poetry
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
python-poetry records in CISA KEVNo python-poetry vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Poetry · all components
TI-2026-26838 CVE-2026-34591 · GHSA-2599-h6xx-hpxp
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Priority MEDIUM 64
Poetry is a dependency manager for Python.
TI-2022-09621 CVE-2022-26184 · GHSA-xr2c-5w89-63pv
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes…
Priority MEDIUM 46
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content.
TI-2022-16493 CVE-2022-36070 · GHSA-j4j9-7hg9-97g6
Poetry's Untrusted Search Path can lead to Local Code Execution on Windows
Priority LOW 34
Poetry is a dependency manager for Python.