Vulnerabilities

TI-2026-39886 CVE-2026-55206 · GHSA-h4gh-22qq-72r7

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

HIGH 77

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00266 Published 2026-07-08 Fixed in 1.1.3 CWE-407

TI-2026-39875 CVE-2026-55195 · GHSA-gjrg-mpp7-g774

HIGH 77

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00321 Published 2026-07-08 Fixed in 1.1.3 CWE-409

TI-2026-19237 CVE-2026-23879 · GHSA-q6rc-2cgv-63h7

HIGH 70

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00498 Published 2026-06-24 Fixed in 1.1.3 CWE-59