py7zr vulnerabilities

3 known vulnerabilities in py7zr from Miurahr. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  py7zr: Inefficient Algorithmic Complexity

  CVE-2026-55206Jul 8, 2026Miurahr

  py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo._read() in archiveinfo.py used an O(n^2) cumulative sum pattern for attacker-controlled numstreams values parsed

• 8.7 High severity

  py7zr: Improper Handling of Highly Compressed Data (Data Amplification)

  CVE-2026-55195Jul 8, 2026Miurahr

  py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress() extracted archive entries without tracking total decompressed size, allowing a crafted .7z fi

• 8.0 High severity

  py7zr: Improper Link Resolution Before File Access

  CVE-2026-23879Jun 24, 2026Miurahr

  py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destin