CVE-2022-26184

9.8

CRITICALCVSS v3

Published

March 21, 2022

CVSS v2

7.5 HIGH

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.

python-poetry/poetry

GitHubPython packaging and dependency management made easy

<= 1.1.9, < 1.1.9NVD

python-poetry/poetry-core

GitHubPoetry PEP 517 Build Backend & Core Utilities

NVD

poetry

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python dependency management and packaging made easy.

<= 1.1.9, < 1.1.9NVD

Poetry

WordPress Plugin Directory<p>Through a Widget or a simple function call this plugin will show random poems from a list of 50 poets in your sidebar, obtained from mypoeticside.com.<br /> You can choose which poets to display while using the widget option, being in total over 6500 possible poems.</p>

<= 1.1.9, < 1.1.9NVD

poetry

NPM

<= 1.1.9, < 1.1.9NVD

Security Advisories

CVE-2022-26184

Description

More on this CVE