CVE-2026-23949
2 advisories.
PyPI/jaraco-context CVE-2026-23949: high 8.6
jaraco.context Has a Path Traversal Vulnerability
Action: Upgrade jaraco-context to 6.1.0 or later.
pip install jaraco-context==6.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 6.1.0 | - |
Fixed versions
| 6.1.0 |
Sources
- osv: GHSA-58pv-8j8x-9vj2
- https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2
- https://nvd.nist.gov/vuln/detail/CVE-2026-23949
- https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9
- https://github.com/jaraco/jaraco.context
- https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91
- https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76
CVE-2026-23949 · published · modified · JSON
PyPI/jaraco-context CVE-2026-23949: high 8.6
jaraco.context Has a Path Traversal Vulnerability
Action: Upgrade jaraco-context to 6.1.0 or later.
pip install jaraco-context==6.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 6.1.0 | - |
Fixed versions
| 6.1.0 |
Sources
- osv: PYSEC-2026-1469
- https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2
- https://nvd.nist.gov/vuln/detail/CVE-2026-23949
- https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9
- https://github.com/jaraco/jaraco.context
- https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91
- https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76
- https://pypi.org/project/jaraco-context
- https://github.com/advisories/GHSA-58pv-8j8x-9vj2
CVE-2026-23949 · published · modified · JSON