https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:47:09 +0000 https://vulnerability.circl.lu/vuln/cve-2024-8088 <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>There is a HIGH severity vulnerability affecting the CPython &#34;zipfile&#34; module affecting &#34;zipfile.Path&#34;. Note that the more common API &#34;zipfile.ZipFile&#34; class is unaffected.</p> <p>When iterating over names of entries in a zip archive (for example, methods of &#34;zipfile.Path&#34; like &#34;namelist()&#34;, &#34;iterdir()&#34;, etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.</p> <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>There is a HIGH severity vulnerability affecting the CPython &#34;zipfile&#34; module affecting &#34;zipfile.Path&#34;. Note that the more common API &#34;zipfile.ZipFile&#34; class is unaffected.</p> <p>When iterating over names of entries in a zip archive (for example, methods of &#34;zipfile.Path&#34; like &#34;namelist()&#34;, &#34;iterdir()&#34;, etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.</p> https://vulnerability.circl.lu/vuln/cve-2024-8088