Threats affecting pkg:pypi/FlexGet

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.9%	CVE-2026-113613FlexGet · Path Traversal Critical9.2EPSS 0.9%2026-10-20CVE Database V5CVE-2026-113613 FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python files into the plugins directory for code execution. EPSS 0.9%Vulnerability	CVE Database V5	2026-10-20

Page 1 of 1