CVE-2026-50558
2 advisories.
PyPI/penelope-shell-handler CVE-2026-50558: medium 5.9
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Action: Upgrade penelope-shell-handler to 0.20.0 or later.
pip install penelope-shell-handler==0.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.20.0 | - |
Fixed versions
| 0.20.0 |
Sources
- osv: GHSA-f42x-p2mx-hm8r
- https://github.com/brightio/penelope/security/advisories/GHSA-f42x-p2mx-hm8r
- https://github.com/brightio/penelope/commit/a040afb5db32c7e80b5e8a2f9b2164cf911cfa62
- https://github.com/brightio/penelope
- https://github.com/brightio/penelope/releases/tag/v0.20.0
CVE-2026-50558 · published · modified · JSON
PyPI/penelope-shell-handler CVE-2026-50558: medium 5.9
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Action: Upgrade penelope-shell-handler to 0.20.0 or later.
pip install penelope-shell-handler==0.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.20.0 | - |
Fixed versions
| 0.20.0 |
Sources
- osv: PYSEC-2026-3606
- https://github.com/brightio/penelope/security/advisories/GHSA-f42x-p2mx-hm8r
- https://github.com/brightio/penelope/commit/a040afb5db32c7e80b5e8a2f9b2164cf911cfa62
- https://github.com/brightio/penelope
- https://github.com/brightio/penelope/releases/tag/v0.20.0
- https://pypi.org/project/penelope-shell-handler
- https://github.com/advisories/GHSA-f42x-p2mx-hm8r
- https://nvd.nist.gov/vuln/detail/CVE-2026-50558
CVE-2026-50558 · published · modified · JSON