pkg:PyPI/poetry

All known vulnerabilities

• CRITICAL9.8CVE-2022-26184Poetry before v1.1.9 contains Untrusted Search Path
  from 0, < 1.1.9
• CRITICAL9.8CVE-2022-26184Poetry before v1.1.9 contains Untrusted Search Path
  from 0, < 1.1.9
• HIGH7.3CVE-2022-36070Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
  from 0, < 1.1.9
• HIGH7.3Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
  from 0, < 1.1.9
• HIGH7.3Poetry Argument Injection can lead to Local Code Execution
  from 0, < 1.1.9
• HIGH7.3Poetry Argument Injection can lead to Local Code Execution
  from 0, < 1.1.9
• MEDIUM6.5Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
  >= 1.4.0, < 2.3.3
• MEDIUM6.5Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
  >= 1.4.0, < 2.3.3
• —Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
  from 0, < 2.3.4
• —Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
  from 0, < 2.3.4