What’s Vulnerable › Products

python-poetry poetry vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your python-poetry poetry version is affected

Latest python-poetry poetry vulnerabilities

• CVE-2026-41140 — Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4 (CVSS 8.7)
• CVE-2026-34591 — Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write (CVSS 6.5)
• CVE-2022-36070 — Poetry's Untrusted Search Path can lead to Local Code Execution on Windows (CVSS 7.3)
• CVE-2022-36069 — Poetry Argument Injection vulnerability can lead to local Code Execution (CVSS 7.3)
• CVE-2022-26184 — (CVSS 9.8)