| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| poetry-2.4.2-py3-none-any.whl | 2026-08-29 | 293.6 kB | |
| poetry-2.4.2.tar.gz | 2026-08-29 | 3.3 MB | |
| 2.4.2 source code.tar.gz | 2026-08-29 | 5.0 MB | |
| 2.4.2 source code.zip | 2026-08-29 | 5.6 MB | |
| README.md | 2026-08-29 | 646 Bytes | |
| Totals: 5 Items | 14.2 MB | 0 | |
Fixed
- Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
- Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
- Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).
