CVE-2026-54550
1 advisory.
Maven/org.codehaus.izpack:izpack-installer CVE-2026-54550: high 7.4, EPSS 0.45%
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.2.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-f63g-88cj-hjf9
- https://github.com/izpack/izpack/security/advisories/GHSA-f63g-88cj-hjf9
- https://github.com/izpack/izpack/pull/1193
- https://github.com/izpack/izpack/commit/4233ba38d0f1825f9cf3e0204e5261a5498e29d8
- https://github.com/izpack/izpack/commit/8b7c6792c4fe85e3b1759c106aae39b904848466
- https://github.com/izpack/izpack
CVE-2026-54550 · published · modified · JSON