Skip to content
OpenAdvisories

Package · Debian

poetry-core

1 known vulnerabilities.

1 result · Feed

  • High 7.3

    Poetry Argument Injection vulnerability can lead to local Code Execution

    Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such as `git clone`. These commands are constructed using user input (e.g. the repository URL). When bui…