debian/python-internetarchive vulnerabilities

Latest debian/python-internetarchive CVEs

Newest publication first

1. CVE-2025-58438 internetarchive is vulnerable to Directory Traversal through file downloads

   Published 2025-09-06

   Critical·CVSS 9.4

   internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize use...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.