Skip to content
OpenAdvisories

Package · Debian

wheel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-24049 Public exploit

    wheel Allows Arbitrary File Permission Modification via Path Traversal

    wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

    pypa wheel python-pip wheel Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2022-40898

    pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

    An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

    python-pip wheel wheel wheel Debian Ubuntu PyPI