HIGH8.2PyPI
GHSA-7h3g-4w2f-fj2f· CVE-2026-54727, PYSEC-2026-3607proot-distro has a Container Isolation Bypass via Crafted Restore Archive
Modified: 8/4/2026
package
PyPI/proot-distro
pkg:pypi/proot-distro
HIGH8.2PyPI
GHSA-9xq3-3fqg-4vg7· CVE-2026-54574, PYSEC-2026-3608`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
Modified: 8/4/2026
MEDIUM6.6PyPI
GHSA-mfr4-mq8w-vmg6PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Modified: 7/17/2026
HIGH8.2PyPI
PYSEC-2026-3607· CVE-2026-54727, GHSA-7h3g-4w2f-fj2fproot-distro has a Container Isolation Bypass via Crafted Restore Archive
Modified: 8/4/2026
HIGH8.2PyPI
PYSEC-2026-3608· CVE-2026-54574, GHSA-9xq3-3fqg-4vg7`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
Modified: 8/4/2026