Find real vulnerabilities before they ship
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Base Score
9.1| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| thefuck(PyPI) | 0 | 3.31 | N/A |
| Base Score | 9.1 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| Base Severity | Critical |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |
