CVE-2026-71492
2 advisories.
PyPI/banks CVE-2026-71492: medium, EPSS 0.47%
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
Action: Upgrade banks to 2.4.5 or later.
pip install banks==2.4.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.5 | - |
Fixed versions
| 2.4.5 |
Sources
- osv: GHSA-x8wg-4xgc-vr54
- https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54
- https://nvd.nist.gov/vuln/detail/CVE-2026-71492
- https://github.com/masci/banks/pull/77
- https://github.com/masci/banks/commit/a215f6d779966945c56e0af5abed1ae5916fd9d3
- https://github.com/masci/banks
- https://github.com/masci/banks/releases/tag/v2.4.5
CVE-2026-71492 · published · modified · JSON
PyPI/banks CVE-2026-71492: unknown, EPSS 0.47%
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
Action: Upgrade banks to 2.4.5 or later.
pip install banks==2.4.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.5 | - |
Fixed versions
| 2.4.5 |
Sources
- osv: PYSEC-2026-3810
- https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54
- https://nvd.nist.gov/vuln/detail/CVE-2026-71492
- https://github.com/masci/banks/pull/77
- https://github.com/masci/banks/commit/a215f6d779966945c56e0af5abed1ae5916fd9d3
- https://github.com/masci/banks
- https://github.com/masci/banks/releases/tag/v2.4.5
- https://pypi.org/project/banks
- https://github.com/advisories/GHSA-x8wg-4xgc-vr54
CVE-2026-71492 · published · modified · JSON