CVE-2026-108258
2 advisories.
PyPI/shiny CVE-2026-108258: medium
Shiny for Python has path traversal in bookmark restore
Action: Upgrade shiny to 1.6.4 or later.
pip install shiny==1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: GHSA-47c3-hpmg-7j6p
- https://github.com/posit-dev/py-shiny/security/advisories/GHSA-47c3-hpmg-7j6p
- https://github.com/posit-dev/py-shiny/commit/1d8ecb46cbc9621b7dc8812111d26692e086b376
- https://github.com/posit-dev/py-shiny
- https://github.com/posit-dev/py-shiny/releases/tag/v1.6.4
CVE-2026-108258 · published · modified · JSON
PyPI/shiny CVE-2026-108258: unknown
Shiny for Python has path traversal in bookmark restore
Action: Upgrade shiny to 1.6.4 or later.
pip install shiny==1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: PYSEC-2026-4300
- https://github.com/posit-dev/py-shiny/security/advisories/GHSA-47c3-hpmg-7j6p
- https://github.com/posit-dev/py-shiny/commit/1d8ecb46cbc9621b7dc8812111d26692e086b376
- https://github.com/posit-dev/py-shiny
- https://github.com/posit-dev/py-shiny/releases/tag/v1.6.4
- https://pypi.org/project/shiny
- https://github.com/advisories/GHSA-47c3-hpmg-7j6p
- https://nvd.nist.gov/vuln/detail/CVE-2026-108258
CVE-2026-108258 · published · modified · JSON