Poetry — CVE history (PyPI)
Poetry
5 CVEs affect the Poetry PyPI package (highest CVSS 9.8). Latest disclosed: 2026-04-24. Full CVE history sourced from NVD.
Summary
- Package
Poetry(PyPI)- Total CVEs
5- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.8- Latest disclosed
- 2026-04-24
Recent CVEs (top 5)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-41140 | High | 8.7 | — | 2026-04-24 | Poetry is a dependency manager for Python. |
CVE-2026-34591 | Medium | 6.5 | — | 2026-04-02 | Poetry is a dependency manager for Python. |
CVE-2022-36070 | High | 7.3 | — | 2022-09-07 | Poetry is a dependency manager for Python. |
CVE-2022-36069 | High | 7.3 | — | 2022-09-07 | Poetry is a dependency manager for Python. |
CVE-2022-26184 | Critical | 9.8 | — | 2022-03-21 | Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. |
All-time worst (top 5 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-26184 | Critical | 9.8 | — | 2022-03-21 | Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. |
CVE-2026-41140 | High | 8.7 | — | 2026-04-24 | Poetry is a dependency manager for Python. |
CVE-2022-36070 | High | 7.3 | — | 2022-09-07 | Poetry is a dependency manager for Python. |
CVE-2022-36069 | High | 7.3 | — | 2022-09-07 | Poetry is a dependency manager for Python. |
CVE-2026-34591 | Medium | 6.5 | — | 2026-04-02 | Poetry is a dependency manager for Python. |