CVE-2019-17109

2 advisories.

PyPI/koji CVE-2019-17109: medium 6.5, EPSS 3.15%

koji hub allows arbitrary upload destinations

Action: Upgrade koji to 1.14.3 or later.

pip install koji==1.14.3

pip install koji==1.15.3

pip install koji==1.16.3

pip install koji==1.17.1

pip install koji==1.18.1

1.14.3

1.15.3

1.16.3

1.17.1

1.18.1

CVE-2019-17109 · published 2022-05-24T16:58:31Z · modified 2024-09-27T18:35:02.936724Z · JSON

Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.

Action: Upgrade koji to 1.19.0 or later.

pip install koji==1.19.0

introduced	fixed	last affected
0	1.19.0	-

1.19.0

CVE-2019-17109 · published 2019-10-09T22:15:00Z · modified 2026-06-10T17:02:01.762597571Z · JSON