Skip to content
OpenAdvisories
Critical DSA-6035-1 1 CVE

python-internetarchive - security update

Published Oct 23, 2025 · Updated Oct 23, 2025

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 python-internetarchive 3.3.0-2~deb12u1
Debian · 13 python-internetarchive 5.4.0-2~deb13u1

Vulnerabilities 1

  • Critical 9.4
    CVE-2025-58438

    internetarchive is vulnerable to Directory Traversal through file downloads

    internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not …

    jjjake internetarchive python-internetarchive internetarchive Debian Ubuntu PyPI