CVE-2026-3479

CVE-2026-3479 concerns Python’s stdlib function pkgutil.get_data() . The root cause is that the function did not validate the resource argument as documented, which enables a path traversal vulnerability. The attack vector is LOCAL , and no privileges are required, with a LOW overall impact as in...