CVE-2026-95168
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в thefuck опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 2
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.