Skip to content

Vendor

jaraco vulnerabilities

2 published CVES affecting jaraco, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of jaraco alerts

Products

Latest jaraco CVEs

Newest publication first

  1. CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability

    Published
    HighCVSS 8.6 EPSS 0.63%

    jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball() function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attack...

  2. CVE-2024-5569 Denial of Service via crafted zip file in jaraco/zipp

    Published
    MediumCVSS 6.2 EPSS 0.24%

    A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.