{"action":"Upgrade wheel to 0.46.2 or later.","affected":[{"fixed":"0.46.2","introduced":"0.40.0"}],"component":"wheel","cve_ids":["CVE-2026-24049"],"ecosystem":"PyPI","epss":0.0035,"exploited":false,"fixed_versions":["0.46.2"],"ghsa_id":"GHSA-8rrh-rw8j-w5fx","id":"tcs_01M5KGX6043T96VHFCDR67Q9XJ","modified_at":"2026-07-07T17:47:43.451695844Z","published_at":"2026-07-07T16:03:19.867108Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2047","https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx","https://nvd.nist.gov/vuln/detail/CVE-2026-24049","https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef","https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e","https://github.com/pypa/wheel","https://github.com/pypa/wheel/releases/tag/0.46.2","https://pypi.org/project/wheel","https://github.com/advisories/GHSA-8rrh-rw8j-w5fx"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-2047","url":"https://osv.dev/vulnerability/PYSEC-2026-2047"}],"summary":"Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack"}