Skip to content
OpenAdvisories
Critical DSA-5652-1 1 CVE

py7zr - security update

Published Apr 2, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 py7zr 0.11.3+dfsg-1+deb11u1

Vulnerabilities 1

  • Critical 9.1
    CVE-2022-44900 Public exploit

    py7zr directory traversal vulnerability

    A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.

    py7zr py7zr py7zr Debian Ubuntu PyPI