Skip to content
Multiple Vulnerabilities in Dulwich Affecting Path Traversal and File Write

Multiple Vulnerabilities in Dulwich Affecting Path Traversal and File Write

First seen 22 Oct 2026, 01:09 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 01:38 UTC
  • •Dulwich versions 0.23.1 and 0.24.0 are affected by critical path traversal vulnerabilities.
  • •Arbitrary file write vulnerability exists in versions before 1.2.9.
  • •No active exploitation has been reported, but users should patch promptly.

Recent advisories have disclosed multiple vulnerabilities in Dulwich versions prior to 1.2.8 and 1.2.9. The first vulnerability, identified as a symlink path traversal issue (CWE-22), affects Dulwich 0.23.1 before 1.2.8. The second vulnerability allows arbitrary file writes via DOS drive letter paths, impacting versions before 1.2.9. A third vulnerability, also a symlink issue, is present in Dulwich 0.24.0 before 1.2.8. These vulnerabilities could potentially allow unauthorized access to sensitive files or system manipulation. No has been reported at this time, but users are advised to prioritize patching their systems. The vulnerabilities have been cataloged under GitHub Security Advisories with specific identifiers for tracking.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-22
Vulnerabilities disclosed
Multiple vulnerabilities in Dulwich were disclosed, including symlink path traversal and arbitrary file write issues.
VulnCheck
2026-10-22
Advisory published
GitHub Security Advisories published details on the vulnerabilities, including CVE identifiers.
VulnCheck
2026-10-22
Patch recommendation issued
Users are urged to update to the latest versions to mitigate the vulnerabilities.
VulnCheck

More articles in this cluster (3)

Extracted Entities (3)

1 / 3

Common questions

Which versions of Dulwich are affected?
Dulwich versions 0.23.1 and 0.24.0 before 1.2.8 are affected by the disclosed vulnerabilities.
Is there active exploitation of these vulnerabilities?
No active exploitation has been reported at this time, but users are advised to patch their systems.
What should I do to protect my systems?
Update to the latest versions of Dulwich to mitigate the vulnerabilities as soon as possible.