CVE-2014-1934
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- opensuse:opensuse
- travis_shirk:eyed3
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4r2w-w73w-36jm | PyPI | eyed3 | <0.7.5 | 0.7.5 |
| PYSEC-2026-807 | PyPI | eyed3 | <0.7.5 | 0.7.5 |