CVE-2026-114583

A flaw was found in Python's tarfile.tarfilter. Crafted link entries in a tar archive, including symlinks with empty or directory-like names, can redirect later archive members outside the intended extraction directory. An application that extracts an untrusted archive with the tar filter could...