Skip to content
OpenAdvisories

Package · Debian

patool

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2026-29509

    Patool < 4.0.5 Path Traversal via safe_extract() Function

    Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string com…

    wummel patool patool patool Debian Ubuntu