medium6.5
CVE-2024-56142
PGHoard Path Traversal vulnerability
Impact
A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | pghoard | < 2.6.1-rc | 2.6.1-rc |