MEDIUM6.5PyPI
GHSA-2599-h6xx-hpxp· CVE-2026-34591, PYSEC-2026-2260Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Modified: 9/10/2026
package
PyPI/poetry
pkg:pypi/poetry
LOWPyPI
GHSA-73h3-mf4w-8647· CVE-2026-41140, PYSEC-2026-2890Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-9xgj-fcgf-x6mw· CVE-2022-36069, PYSEC-2022-266Poetry Argument Injection can lead to Local Code Execution
Modified: 10/21/2024
HIGH7.3PyPI
GHSA-j4j9-7hg9-97g6· CVE-2022-36070, PYSEC-2022-43179Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Modified: 6/10/2026
CRITICAL9.8PyPI
GHSA-xr2c-5w89-63pv· CVE-2022-26184, PYSEC-2022-234Poetry before v1.1.9 contains Untrusted Search Path
Modified: 10/21/2024
—PyPI
PYSEC-2022-234· CVE-2022-26184, GHSA-xr2c-5w89-63pvModified: 11/8/2023
—PyPI
PYSEC-2022-266· CVE-2022-36069, GHSA-9xgj-fcgf-x6mwModified: 11/8/2023
HIGH7.3PyPI
PYSEC-2022-43179· CVE-2022-36070, GHSA-j4j9-7hg9-97g6Modified: 6/10/2026
MEDIUM6.5PyPI
PYSEC-2026-2260· CVE-2026-34591, GHSA-2599-h6xx-hpxpModified: 7/13/2026
—PyPI
PYSEC-2026-2890· CVE-2026-41140, GHSA-73h3-mf4w-8647Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Modified: 7/13/2026