python-poetry

Products

ProductCVEsExploitedLatest
poetry4–Apr 24, 2026

Exploited and recent CVEs

  • CVE-2026-41140 High 8.7 Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4 0.3%
  • CVE-2026-34591 High 7.1 Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write 0.5%
  • CVE-2022-36069 High 7.3 Poetry Argument Injection vulnerability can lead to local Code Execution 1.3%
  • CVE-2022-36070 High 7.3 Poetry's Untrusted Search Path can lead to Local Code Execution on Windows 0.4%