CVE-2021-34363: Fedoraproject Fedora

Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days.

The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• The Fuck Project The Fuck: before 3.31 (fixed in 3.31)

Published 2021-06-10. Last modified 2026-06-17.