https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:26:15 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-29509 <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> https://db.gcve.eu/vuln/fkie_cve-2026-29509 https://db.gcve.eu/vuln/ghsa-p95f-9f9h-wwvh <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> https://db.gcve.eu/vuln/ghsa-p95f-9f9h-wwvh https://db.gcve.eu/vuln/ubuntu-cve-2026-29509 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: patool, Ubuntu:18.04:LTS: patool, Ubuntu:20.04:LTS: patool, Ubuntu:22.04:LTS: patool, Ubuntu:24.04:LTS: patool, Ubuntu:25.10: patool, Ubuntu:26.04:LTS: patool</p> <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: patool, Ubuntu:18.04:LTS: patool, Ubuntu:20.04:LTS: patool, Ubuntu:22.04:LTS: patool, Ubuntu:24.04:LTS: patool, Ubuntu:25.10: patool, Ubuntu:26.04:LTS: patool</p> <p>Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string comparison instead of path-level comparison, allowing a crafted archive member path to bypass the containment check. Attackers can supply a malicious archive with specially crafted member paths to write arbitrary files.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-29509