Package · PyPI

diffoscope

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.1

CVE-2024-25711

diffoscope Path Traversal vulnerability

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

diffoscope diffoscope diffoscope diffoscope Debian Ubuntu Alpine PyPI

Feb 11, 2024
Critical 9.8

CVE-2017-0359

diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

Debian diffoscope diffoscope diffoscope Debian Ubuntu PyPI

Apr 13, 2018