Py7zr Project vulnerabilities
We track 1 vulnerability in Py7zr Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 6, 2022.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Py7zr Project vulnerabilities
- 9.1 Critical severity
Py7zr: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.