py7zr vulnerabilities
CVEs whose affected-version data names the py7zr package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-23879High· 8.0py7zr: Arbitrary File Write Vulnerability
py7zr: Arbitrary File Write Vulnerability
▾ Twilightpy7zr · py7zrEPSS 0.57%via GHSA
CVE-2026-55195Mediumpy7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size
▾ Sunlitpy7zr · py7zrEPSS 0.32%via GHSA
CVE-2026-55206Mediumpy7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
▾ Sunlitpy7zr · py7zrEPSS 0.32%via GHSA