{"action":"Upgrade wheel to 0.46.2 or later.","affected":[{"fixed":"0.46.2","introduced":"0.40.0"}],"component":"wheel","cve_ids":["CVE-2026-24049"],"ecosystem":"PyPI","epss":0.0035,"exploited":false,"fixed_versions":["0.46.2"],"ghsa_id":"GHSA-8rrh-rw8j-w5fx","id":"tcs_01M5KF93K11TNFZD2G6WDP4YZF","modified_at":"2026-09-10T03:50:32.887502862Z","published_at":"2026-01-22T18:02:56Z","references":["https://osv.dev/vulnerability/GHSA-8rrh-rw8j-w5fx","https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx","https://nvd.nist.gov/vuln/detail/CVE-2026-24049","https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef","https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e","https://github.com/pypa/wheel","https://github.com/pypa/wheel/releases/tag/0.46.2"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-8rrh-rw8j-w5fx","url":"https://osv.dev/vulnerability/GHSA-8rrh-rw8j-w5fx"}],"summary":"Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack"}