AIKIDO-2026-10495

TL;DR

Affected versions of this package are vulnerable to path traversal due to improper validation of paths within zipapp archives. The affected logic determines whether a resolved path stays within the archive using string-based prefix checks after os.path.realpath, which is unreliable across platforms and can be bypassed in edge cases involving path separators or symlinks. An attacker able to supply crafted paths can cause resolution outside the intended archive boundary, potentially accessing unintended files on the filesystem.