Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/11 1:52 p.m.11 views

BIT-LIBPYTHON-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

5.3CVSS8AI score0.00663EPSS
SaveExploits1References14
Rows per page
Query Builder