CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py
Published Updated
PatchFirst · Latest vulnerabilities
thefuck vulnerabilities
Vulnerabilities published for thefuck in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2021-34363
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
- Update to 3.29-0.3
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.