Sign In

CVE-2026-3479

ADVISORY - nist

Summary

pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.

EPSS Score⁠: 0.00018 (0.041)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-22⁠

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADVISORY - redhat

CWE-22⁠

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Impacted images

Advisories
Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.

Sign in