Skip to content
OpenAdvisories

Package · PyPI

cornac

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-43637 Public exploit

    Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py

    Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or symlink/hardlink entries…

    PreferredAI cornac cornac PyPI