CVE-2026-74764

creationtimestamp| type| source ---|---|--- 2026-08-15 22:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5pxbekkd23 2026-08-16 12:50:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt77z2bg322b 2026-08-17 18:00:05+00:00| seen|...

CVE-2026-74764

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...

CVE-2026-74764 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...