fsspec (PyPI)

A specification that python filesystems should adhere to.

Advisories

Latest version

2026.9.0

Released Sep 18, 2026

License

BSD-3-Clause

OpenSSF Scorecard

5.4 / 10

How to fix

Upgrading to 2026.6.0 or later clears every advisory below that has a fix.

Upgrade commands

pip

pip install --upgrade "fsspec>=2026.9.0"

poetry

poetry add "fsspec>=2026.9.0"

uv add "fsspec>=2026.9.0"

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-27vj-qcqg-25rc fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution	High EPSS 0.47%	`>= 0.9.0, < 2026.6.0`	`2026.6.0`
GHSA-27vj-qcqg-25rc fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution	High EPSS 0.47%	`>= 0.9.0, < 2026.6.0`	`2026.6.0`

Source: https://github.com/fsspec/filesystem_spec

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor