PyPI/dulwich CVE-2026-114094: high 8.8
Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths
Action: Upgrade dulwich to 1.2.9 or later.
pip install dulwich==1.2.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.9 | - |
Fixed versions
| 1.2.9 |
Sources
- osv: GHSA-8mcx-5rqc-vhmf
- https://github.com/jelmer/dulwich/security/advisories/GHSA-8mcx-5rqc-vhmf
- https://github.com/jelmer/dulwich/commit/4ca77f9f470742ba246cd6fa07beb6d735045664
- https://github.com/jelmer/dulwich
- https://github.com/jelmer/dulwich/releases/tag/dulwich-1.2.9
CVE-2026-114094 · published · modified · JSON