Vulnerabilities for luigi

First version without a known vulnerability: 3.6.0

Details

• GHSA-8qch-vj6m-26942024-12-10

  luigi Arbitrary File Write via Archive Extraction (Zip Slip)

  Fixed in: 3.6.0, b5d1b965ead7d9f777a3216369b5baf23ec08999

• GHSA-p69g-f978-xxv92018-12-20

  Cross-Site Request Forgery (CSRF) in Luigi

  Fixed in: 2.8.0