Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

diffoscope

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high
Registry
PyPI

Advisories 2

  • diffoscope before 256 allows directory traversal via an embedded filename in a GPG file.

    Affected: fixed in 256.

  • diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive

    Affected: fixed in 77; fixed in 76.