Lucene search
+L

2 matches found

OSV
OSV
added 2025/08/11 1:53 p.m.12 views

BIT-LIBPYTHON-2025-4517 Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

9.4CVSS8AI score0.01227EPSS
SaveExploits11References13
Rows per page
Query Builder