Package · Azure Linux

python-wheel

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Medium 5.9

CVE-2026-111450

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts…

Wheels Wheels python-wheel Azure Linux

Oct 16, 2026
Critical 9.8

CVE-2026-111444 Public exploit

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent…

Wheels Wheels python-wheel Azure Linux

Oct 16, 2026
High 7.1

CVE-2026-24049 Public exploit

wheel Allows Arbitrary File Permission Modification via Path Traversal

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

pypa wheel open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jan 22, 2026
High 7.5

CVE-2022-40898

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

python-pip python-wheel wheel wheel Debian Ubuntu Azure Linux PyPI

Dec 22, 2022