Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.3%	CVE-2026-108597cohere-python · Path Traversal Medium5.9EPSS 0.3%2026-10-10CVE Database V5CVE-2026-108597 Cohere Python SDK versions 5.11.0 through 7.2.0 contain a path traversal vulnerability in the _s3_models_dir_to_tarfile function. This flaw allows attackers who can write model archives to the victim's S3 prefix to include absolute or relative paths in tar archives, leading to arbitrary file overwrite on the host system running the SDK. EPSS 0.3%Vulnerability cohere-ai	CVE Database V5	2026-10-10

Showing 1–1 of 1 result