GitHub Advisoryadvisory · PyPI

GHSA-ph2w-cx28-vhrq TkEasyGUI Affected by Uncontrolled Search Path Element Issue

HIGH Published 2025-09-05 Modified 2025-09-05 Official page ↗
Aliases
CVE-2025-55671
Ecosystem
PyPI
Packages
TkEasyGUI
Severity
High
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-427
Reviewed
2025-09-05

Affected packages

• PyPI TkEasyGUI: < 1.0.22 → fixed in 1.0.22

Description

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program.

Related

Alias · CVE (1)

  • CVE-2025-55671 Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. vulnerability

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References