2 matches found
AZL-97038 CVE-2026-19672 affecting package python3 for versions less than 3.12.14-2
The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...
6.3CVSS5.9AI score0.00472EPSS
SaveExploits0References1
20