Lucene search
+L

2 matches found

osv_azl
osv_azl
•added 2026/08/19 4:17 p.m.•17 views

AZL-97038 CVE-2026-19672 affecting package python3 for versions less than 3.12.14-2

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

6.3CVSS5.9AI score0.00472EPSS
SaveExploits0References1
Rows per page
Query Builder