{"items":[{"id":"CVE-2026-41140","published":"2026-04-24T17:10:33.869Z","updated":"2026-07-15T00:59:56.835Z","title":"Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4","severity":"LOW","score":0.6,"vendor":"python-poetry","product":"poetry","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-34591","published":"2026-04-02T17:35:07.691Z","updated":"2026-04-03T18:12:07.813Z","title":"Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write","severity":"HIGH","score":7.1,"vendor":"python-poetry","product":"poetry","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2022-36069","published":"2022-09-07T18:30:19.000Z","updated":"2025-04-22T17:23:39.217Z","title":"Poetry Argument Injection vulnerability can lead to local Code Execution","severity":"HIGH","score":7.3,"vendor":"python-poetry","product":"poetry","kev":false,"epss":0.01324,"kevAdded":null},{"id":"CVE-2022-36070","published":"2022-09-07T18:30:14.000Z","updated":"2025-04-23T17:14:12.700Z","title":"Poetry's Untrusted Search Path can lead to Local Code Execution on Windows","severity":"HIGH","score":7.3,"vendor":"python-poetry","product":"poetry","kev":false,"epss":0.00365,"kevAdded":null}]}