Poetry bug bounty programs
python-poetry.org Updated
Poetry runs one public program: a Sorona bug bounty paying up to $1,500.
- Top reward
- $1,500
- Sorona
- Programs
- 1
- 1 pays cash
- Targets in scope
- 12
- 2 types
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program Poetry runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Poetry
Sorona · Bug bounty |
– | – | – | $100 | $1,500 | Partial | – | – | Open |
-
- Critical
- –
- High
- –
- Medium
- –
- Low
- $100
- Safe harbor
- Partial
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
12 targets. 6 excluded.
-
https://python-poetry.org
Web
-
Credential handling in full: poetry config storage, the keyring integration, environment-variable credentials and the tokens poetry publish uses
Products and areas
-
poetry build and poetry publish, including the metadata they generate and the credentials they carry
Products and areas
-
Poetry publishes no policy and no scope statement. The private reporting channel takes vulnerabilities in Poetry's own code, and nothing narrower than that has ever been written down
Products and areas
-
poetry.lock handling, covering the format, the hashes it records and what a lock entry is taken to guarantee on a later install
Products and areas
-
Source and index configuration, covering multiple sources, source priorities and how Poetry chooses between a private index and PyPI
Products and areas
-
The dependency resolver and everything that decides which version of which package is installed
Products and areas
-
The HTTP and artefact caches, and anything that lets one install seed content a later install trusts
Products and areas
-
The plugin system and poetry self add, which install third-party code into the environment Poetry itself runs from
Products and areas
-
The repository client: metadata fetching, the simple and JSON index APIs, redirect handling and TLS verification
Products and areas
-
Virtual environment creation and the paths, scripts and entry points Poetry writes into it
Products and areas
-
Wheel and source distribution download, extraction and file placement, including path handling on unpack
Products and areas
No target matches. Try part of a host name, such as the company name.
Out of scope 6
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Executing a source distribution's build code, which is what installing an sdist means in Python packaging
-
Malicious packages published to PyPI, which is registry abuse rather than a Poetry defect
-
pip, setuptools and the rest of the packaging stack Poetry sits on top of
-
poetry-core, the build backend, which is a separate repository with its own release cycle
-
PyPI itself and the Warehouse codebase behind it
-
Third-party Poetry plugins that are not maintained under the python-poetry organisation
Recent changes
Reward and scope changes across every Poetry program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in Poetry products, from the NVD.
-
CVE-2026-34591 High
Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, allowing arbitrary file write with the privileges of the Poetry process. It is reachable from untrusted package artifacts during normal install flows. (Normally, installing a malicious wheel is not sufficient for executi
-
CVE-2022-42966 Medium
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
-
CVE-2022-36069 High
Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such as `git clone`. These commands are constructed using user input (e.g. the repository URL). When building the commands, Poetry correctly avoids Command Injection vulnerabilities by passing an array of arguments instead of a command string. H
-
CVE-2022-36070 High
Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. `git config`. These commands are being executed using the executable’s name and not its absolute path. This can lead to the execution of untrusted code due to the way Windows resolves executable names to paths. Unlike Linux-based operating systems, Windows searc
-
CVE-2022-26184 Critical
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.
About this page
This page gathers every public program listed under python-poetry.org: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.