HIGH8.2PyPI
GHSA-587r-mc96-6f2p· CVE-2026-44971, PYSEC-2026-2505GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
Modified: 7/13/2026
package
PyPI/guarddog
pkg:pypi/guarddog
MEDIUM5.8PyPI
GHSA-78m5-jpmf-ch7v· CVE-2022-23530, PYSEC-2022-42993GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Modified: 11/20/2024
HIGHPyPI
GHSA-ffj4-jq7m-9g6v· CVE-2026-22870, PYSEC-2026-1429GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
Modified: 7/7/2026
MEDIUM5.0PyPI
GHSA-m5p4-gvpx-4mvr· CVE-2026-44972, PYSEC-2026-2506GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
Modified: 7/13/2026
MEDIUM5.8PyPI
GHSA-rp2v-v467-q9vq· CVE-2022-23531, PYSEC-2022-42994GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Modified: 2/22/2026
HIGHPyPI
GHSA-xg9w-vg3g-6m68· CVE-2026-22871, PYSEC-2026-1430GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Modified: 7/7/2026
—PyPI
PYSEC-2022-42993· CVE-2022-23530, GHSA-78m5-jpmf-ch7vModified: 11/8/2023
—PyPI
PYSEC-2022-42994· CVE-2022-23531, GHSA-rp2v-v467-q9vqModified: 2/22/2026
—PyPI
PYSEC-2026-1429· CVE-2026-22870, GHSA-ffj4-jq7m-9g6vGuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
Modified: 7/7/2026
—PyPI
PYSEC-2026-1430· CVE-2026-22871, GHSA-xg9w-vg3g-6m68GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-2505· CVE-2026-44971, GHSA-587r-mc96-6f2pGuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
Modified: 7/13/2026
MEDIUM5.0PyPI
PYSEC-2026-2506· CVE-2026-44972, GHSA-m5p4-gvpx-4mvrGuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
Modified: 7/13/2026