CVE-2026-48099
2 advisories.
PyPI/wsgidav CVE-2026-48099: high 7.1
WsgiDAV encoded dot segments can escape filesystem share roots
Action: Upgrade wsgidav to 4.3.4 or later.
pip install wsgidav==4.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.4 | - |
Fixed versions
| 4.3.4 |
Sources
- osv: GHSA-wxq4-cc2q-338q
- https://github.com/mar10/wsgidav/security/advisories/GHSA-wxq4-cc2q-338q
- https://github.com/mar10/wsgidav/commit/f894ed8656d7bdd7438ab8148c5a02546cb15183
- https://github.com/mar10/wsgidav
CVE-2026-48099 · published · modified · JSON
PyPI/wsgidav CVE-2026-48099: high 7.1
WsgiDAV encoded dot segments can escape filesystem share roots
Action: Upgrade wsgidav to 4.3.4 or later.
pip install wsgidav==4.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.4 | - |
Fixed versions
| 4.3.4 |
Sources
- osv: PYSEC-2026-3428
- https://github.com/mar10/wsgidav/security/advisories/GHSA-wxq4-cc2q-338q
- https://github.com/mar10/wsgidav/commit/f894ed8656d7bdd7438ab8148c5a02546cb15183
- https://github.com/mar10/wsgidav
- https://pypi.org/project/wsgidav
- https://github.com/advisories/GHSA-wxq4-cc2q-338q
- https://nvd.nist.gov/vuln/detail/CVE-2026-48099
CVE-2026-48099 · published · modified · JSON