CVE-2022-26184

Name of the Vulnerable Software and Affected Versions Poetry versions 1.1.9 and below

Description The issue is related to an untrusted search path in Poetry, which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This occurs when the application is run on Windows OS.

Recommendations For versions 1.1.9 and below, update to a version above 1.1.9 to resolve the issue. As a temporary workaround, consider avoiding the execution of Poetry commands in directories that may contain malicious content.