Skip to content
OpenAdvisories

Package · Debian

gdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-40491

    gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall

    gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When extracting a maliciously crafted ZIP or TAR archive, the library fails to sanitize or validate t…

    wkentaro gdown gdown gdown Debian Ubuntu PyPI