MEDIUMPyPI
GHSA-gjrg-mpp7-g774· CVE-2026-55195, PYSEC-2026-2972py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
Modified: 7/13/2026
package
PyPI/py7zr
pkg:pypi/py7zr
MEDIUMPyPI
GHSA-h4gh-22qq-72r7· CVE-2026-55206, PYSEC-2026-2973py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
Modified: 7/13/2026
CRITICAL9.1PyPI
GHSA-m8xw-9x5x-6vh3· CVE-2022-44900, PYSEC-2022-42998py7zr directory traversal vulnerability
Modified: 10/18/2024
HIGH8.0PyPI
GHSA-q6rc-2cgv-63h7· CVE-2026-23879, PYSEC-2026-2974py7zr: Arbitrary File Write Vulnerability
Modified: 7/21/2026
—PyPI
PYSEC-2022-42998· CVE-2022-44900, GHSA-m8xw-9x5x-6vh3Modified: 6/10/2026
—PyPI
PYSEC-2026-2972· CVE-2026-55195, GHSA-gjrg-mpp7-g774py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
Modified: 7/13/2026
—PyPI
PYSEC-2026-2973· CVE-2026-55206, GHSA-h4gh-22qq-72r7py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
Modified: 7/13/2026
HIGH8.0PyPI
PYSEC-2026-2974· CVE-2026-23879, GHSA-q6rc-2cgv-63h7py7zr: Arbitrary File Write Vulnerability
Modified: 7/13/2026