VDB

GCVE-110-GENTOO-2024-927299

GCVE-110-GENTOO-2024-927299
Advisory Published
Vulnetix · Advisory published May 4, 2024
[Bug 927299] <dev-lang/python-{3.8.19,3.9.19,3.10.14,3.11.8,3.12.2}, <dev-python/pypy3_{9,10}-7.3.16: “quoted-overlap” zip-bombs in zipfile module, dereferencing symlinks in cleanup of TemporaryDirectory

Affected Products

VendorProductVersionsPlatforms
Gentoodev-python/pypy3_9——
Gentoodev-lang/python——
Gentoodev-python/pypy3_10——

Browse GCVE Records

869 records in the GCVE database · Updated October 29, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›