2 matches found
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1963)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1963 advisory. When using the configparser module to write configuration filescontaining multi-line text values with carriage return characters \r theresulting file could be injected with unexpected keys and...
8.2CVSS6.5AI score0.00837EPSS
SaveExploits2References12
Important: python3.13
Issue Overview: The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other...
8.2CVSS4.8AI score0.00445EPSS
SaveExploits0
20