MEDIUM5.5PyPI
GHSA-mq5j-pw29-jcv3· CVE-2026-46383, PYSEC-2026-2378Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`
Modified: 7/13/2026
package
PyPI/apm-cli
pkg:pypi/apm-cli
HIGH7.1PyPI
GHSA-xhrw-5qxx-jpwr· CVE-2026-44641, PYSEC-2026-2379Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2378· CVE-2026-46383, GHSA-mq5j-pw29-jcv3Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`
Modified: 7/13/2026
HIGH7.1PyPI
PYSEC-2026-2379· CVE-2026-44641, GHSA-xhrw-5qxx-jpwrMicrosoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
Modified: 7/13/2026