CVE-2026-23949 | jaraco jaraco.context up to 6.0.x jaraco.context.tarball path traversal (GHSA-58pv-8j8x-9vj2)

January 20, 2026 Yanac

A vulnerability was found in jaraco jaraco.context up to 6.0.x. It has been declared as critical. Affected by this issue is the function jaraco.context.tarball. Executing a manipulation can lead to path traversal.

The identification of this vulnerability is CVE-2026-23949. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More