CVE-2026-119083

Versions of GluonTS prior to 0.17.0 are vulnerable to a path traversal vulnerability in the archive extraction utility. An attacker providing a crafted tar archive can use symbolic or hard links to write arbitrary files outside the intended extraction directory, executing with the privileges of t...