PyPI/pyinstaller CVE-2019-16784: high 7, EPSS 0.69%

Local Privilege Escalation in PyInstaller

Action: Upgrade pyinstaller to 3.6 or later.

pip install pyinstaller==3.6

Affected

Fixed versions

Sources

• osv: GHSA-7fcj-pq9j-wh2r
• https://github.com/pyinstaller/pyinstaller/security/advisories/GHSA-7fcj-pq9j-wh2r
• https://nvd.nist.gov/vuln/detail/CVE-2019-16784
• https://github.com/pyinstaller/pyinstaller/commit/42a67148b3bdf9211fda8499fdc5b63acdd7e6cc
• https://github.com/pyinstaller/pyinstaller/commit/be948cf0954707671aa499da17b10c86b6fa5e5c
• https://github.com/pyinstaller/pyinstaller
• https://github.com/pypa/advisory-database/tree/main/vulns/pyinstaller/PYSEC-2020-175.yaml

CVE-2019-16784 · published 2020-01-16T22:18:27Z · modified 2026-09-10T03:49:25.186628514Z · JSON