All products

poetry

PyPI · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File WriteCVE-2026-34591 · GHSA-2599-H6XX-HPXPVersion ranges need review. poetry PyPI High Fix reported
Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4CVE-2026-41140 · GHSA-73H3-MF4W-8647Version ranges need review. poetryRed Hat Ansible Automation Platform 2/ansible-automation-platform-26/controller-rhel9 PyPIRed Hat Low Fix reported
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on WindowsCVE-2022-36070 · GHSA-J4J9-7HG9-97G6Version ranges need review. poetry PyPI High Fix reported
Poetry before v1.1.9 contains Untrusted Search PathCVE-2022-26184 · GHSA-XR2C-5W89-63PVVersion ranges need review. poetry PyPI Critical Fix reported
Poetry Argument Injection can lead to Local Code ExecutionCVE-2022-36069 · GHSA-9XGJ-FCGF-X6MWVersion ranges need review. poetry PyPI High Fix reported