extractall of the file src/poetry/utils/helpers.py. The manipulation leads to path traversal.This vulnerability is traded as CVE-2026-41140. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
SOCIAL SHARE CARD GENERATOR