https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:20:17.168052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-21542 CVE-2024-21542 2026-10-10T15:20:17.169524+00:00

Affected: luigi

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

 https://cve.radiocsirt.org/vuln/ghsa-8qch-vj6m-2694 GHSA-8qch-vj6m-2694 — luigi Arbitrary File Write via Archive Extraction (Zip Slip) 2026-10-10T15:20:17.169576+00:00

Affected: PyPI: luigi

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.