Lucene search

K
osvGoogleOSV:PYSEC-2021-97
HistoryJun 10, 2021 - 11:15 a.m.

PYSEC-2021-97

2021-06-1011:15:00
Google
osv.dev
10
python
path traversal
file deletion
package
undo archive operation

EPSS

0.002

Percentile

59.0%

The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the “undo archive operation” feature.