Lucene search
+L

2 matches found

OSV
OSV
added 2025/08/11 1:53 p.m.12 views

BIT-LIBPYTHON-2025-4517 Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

9.4CVSS8AI score0.01227EPSS
SaveExploits11References13
OSV
OSV
added 2025/06/03 1:15 p.m.6 views

DEBIAN-CVE-2025-4517

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

9.4CVSS7.3AI score0.01227EPSS
SaveExploits11References1
Rows per page
Query Builder