Skip to content
OpenAdvisories
Critical DLA-4314-1 1 CVE

python-internetarchive - security update

Published Sep 30, 2025 · Updated Sep 30, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 python-internetarchive 1.9.9-1+deb11u1

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-58438

    internetarchive is vulnerable to Directory Traversal through file downloads

    internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not …

    jjjake internetarchive python-internetarchive internetarchive Debian Ubuntu PyPI