8.6
Élevée
CVE-2024-21542 Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)…
Description
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| luigi 3.6 | premières → < 3.6.0 | 3.6.0 |