parseusbs vulnerabilities
CVEs whose affected-version data names the parseusbs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-40030High· 7.8parseusbs < 1.9 Command Injection via Volume Path Argument
parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell command with ls, allowing arbitrary command injection via crafted volume …
▾ Twilightkhyrenz · parseusbsEPSS 0.75%via CVEORG
CVE-2026-40029High· 7.8parseusbs < 1.9 Command Injection via Crafted LNK Filename
parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allowing arbitrary command execution via crafted .lnk filenames containing …
▾ Twilightkhyrenz · parseusbsEPSS 0.80%via CVEORG