TI-2026-29768 CVE-2026-41140 · GHSA-73h3-mf4w-8647
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Priority LOW 5
Poetry is a dependency manager for Python.
Vulnerabilities
6 records
TI-2026-26838 CVE-2026-34591 · GHSA-2599-h6xx-hpxp
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Priority MEDIUM 64
Poetry is a dependency manager for Python.
TI-2022-20946 CVE-2022-42966 · GHSA-2p9h-ccw7-33gf
Exponential ReDoS in cleo leads to denial of service
Priority HIGH 66
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
TI-2022-16492 CVE-2022-36069 · GHSA-9xgj-fcgf-x6mw
Poetry Argument Injection vulnerability can lead to local Code Execution
Priority HIGH 67
Poetry is a dependency manager for Python.
TI-2022-16493 CVE-2022-36070 · GHSA-j4j9-7hg9-97g6
Poetry's Untrusted Search Path can lead to Local Code Execution on Windows
Priority LOW 34
Poetry is a dependency manager for Python.
TI-2022-09621 CVE-2022-26184 · GHSA-xr2c-5w89-63pv
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes…
Priority MEDIUM 46
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content.