Security Advisory

CVE-2024-21542

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-10 05:00:01

Last updated 2025-07-24 13:07:39

Assigner snyk

State PUBLISHED

Description

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive function.

← Browse all CVEs View on cve.org ↗