Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-21542
8.6
HIGHCVSS v3
Severity scale
010
Description
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.
spotify/luigi
GitHubLuigi is a Python module that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization etc. It also comes with Hadoop support built in.
GitHubLuigi is a Python module that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization etc. It also comes with Hadoop support built in.< 3.6.0NVD