PO
Product
poetry
by python-poetry · last CVE Apr 24, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch

Add poetry to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41140
8.7
0%
Apr 24
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Affected: < 2.3.4
CVE-2022-36070
7.3
0%
Sep 7
Poetry is a dependency manager for Python
Affected: before 1.1.9; 1.2.0; 1.2.0
CVE-2022-36069
7.3
1%
Sep 7
Poetry is a dependency manager for Python
Affected: before 1.1.9; 1.2.0; 1.2.0
Showing 3