cornac vulnerabilities

CVEs whose affected-version data names the cornac package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-43637Critical· 9.1PoC

3mo ago

Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py

Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or sy…

▾ AbyssalPreferredAI · cornacEPSS 0.66%via CVEORG