Vulnerabilities for py7zr

First version without a known vulnerability: 1.1.3

Details

• GHSA-h4gh-22qq-72r72026-06-19

  py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

  Fixed in: 1.1.3

• GHSA-gjrg-mpp7-g7742026-06-19

  py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

  Fixed in: 1.1.3

• GHSA-q6rc-2cgv-63h72026-06-19

  py7zr: Arbitrary File Write Vulnerability

  Fixed in: 1.1.3

• GHSA-m8xw-9x5x-6vh32022-12-06

  py7zr directory traversal vulnerability

  Fixed in: 0.20.1, 1bb43f17515c7f69673a1c88ab9cc72a7bbef406