Login Request a demo
PO
Product
poetry
by python-poetry · last CVE Apr 24, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add poetry to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-26184
9.8
2%
Mar 21
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a…
Affected: through 1.1.9
CVE-2026-41140
8.7
0%
Apr 24
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Affected: < 2.3.4
CVE-2022-36070
7.3
0%
Sep 7
Poetry is a dependency manager for Python
Affected: before 1.1.9; 1.2.0; 1.2.0
CVE-2022-36069
7.3
1%
Sep 7
Poetry is a dependency manager for Python
Affected: before 1.1.9; 1.2.0; 1.2.0
CVE-2026-34591
6.5
0%
Apr 2
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Affected: >= 1.4.0, < 2.3.3
Showing 5