GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-113613: Python Uncontained Archive Member Path Joincve-2026-113613-python-uncontained-archive-member-path-join

Archive member name ($MEMBER_EXPR) is joined onto base path $BASE and the result is used as an extraction destination without a containment check. Member names containing "../" sequences or an absolute path resolve outside the destination directory, so an attacker-supplied archive can write arbitrary files (Zip Slip, CWE-22). Resolve the joined path and veri

PythonCVE-2026-113613CWE-22CWE-23
by Provallyupdated 2026-10-27Apache-2.0
500 direct50 via packs
83
All matching rules loaded.