Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

archivebox

2 known vulnerabilities (1 critical, 1 medium), with the versions each affects and the releases that fix them.

Latest release
0.9.77 (Oct 27, 2026): no advisory affects it
Newest unaffected release
0.9.77 (Oct 27, 2026), the latest release
Advisories
2 · 1 critical, 1 medium
Weekly downloads
4,916
Dependents
0
Releases
500+ since 0.9.36 (Sep 22, 2026)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-42601
    No published release is affected
    No published release is affected
  • CVE-2023-45815
    No published release is affected
    No published release is affected
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 2

  • CVE-2026-42601Critical 9.3

    ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

    Affected: through 0.8.6rc0.

    Fixed in 0.9.36 (released Sep 22, 2026, 136 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 0.9.77, is not affected.

  • CVE-2023-45815Medium 6.4

    ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

    Affected: fixed in 0.9.0; fixed in 0.7.0.

    Fixed in 0.9.0.

    The latest release, 0.9.77, is not affected.