pandora vulnerabilities

CVEs whose affected-version data names the pandora package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-88069Critical· 9.3

2w ago

Pandora contains a path traversal vulnerability in its archive extraction worker

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination rem…

▾ Midnightpandora-analysis · pandoraEPSS 0.33%via NVD