rpm package
opensuse/python-unearth&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/python-unearth&distro=openSUSE%20Leap%2016.0
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-73030 | Hig | 8.1 | < 0.17.3-bp160.2.1 | 0.17.3-bp160.2.1 | Aug 10, 2026 | unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives |
- affected < 0.17.3-bp160.2.1fixed 0.17.3-bp160.2.1
unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives