python-internetarchive - security update
python-internetarchive - security update
- Update to 3.3.0-2~deb12u1
Published Updated
PatchFirst · Latest vulnerabilities
python-internetarchive vulnerabilities
Vulnerabilities published for python-internetarchive in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
internetarchive is vulnerable to Directory Traversal through file downloads
internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize user-supplied filenames or validate the final download path. A maliciously crafted filename could contain path traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would cause the file to be written outside of the intended target directory. An attacker could potentially overwrite critical system files or applicatio
- Update to 3.3.0-2~deb12u1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.