CyberSecBulletin

Luigi vulnerabilities

We track 1 vulnerability in Luigi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2024.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Luigi vulnerabilities

  • 8.6 High severity

    luigi: Path Traversal: '..filename'

    CVE-2024-21542 LuigiEPSS 1.14%

    Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.