Known Vulnerabilities for products from Python-poetry
Listed below are 5 of the newest known vulnerabilities associated with the vendor "Python-poetry".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34591 json | Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths ... | Not Provided | 2026-04-02 | 2026-04-13 |
| CVE-2022-42966 json | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is ab... | 7.5 - HIGH | 2022-11-09 | 2023-07-06 |
| CVE-2022-36070 json | Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various co... | 7.3 - HIGH | 2022-09-07 | 2022-09-13 |
| CVE-2022-36069 json | Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, ... | 7.3 - HIGH | 2022-09-07 | 2023-10-25 |
| CVE-2022-26184 json | Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpect... | 9.8 - CRITICAL | 2022-03-21 | 2023-10-23 |