Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-21542

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8qch-vj6m-2694

luigi Arbitrary File Write via Archive Extraction (Zip Slip) Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

gitlab/pypi/luigi/CVE-2024-21542

luigi Arbitrary File Write via Archive Extraction (Zip Slip) Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

pypa/luigi/PYSEC-2024-159

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

pysec/PYSEC-2024-159

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.