CVE-2026-41958
EUVD-2026-9432107.10.2026, 13:17
A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability.
Awaiting analysis
This vulnerability is currently awaiting analysis.
Ubuntu Releases