Lucene search
+L

1 matches found

OSV
OSV
added 2025/07/10 9:2 a.m.13 views

BIT-PYTHON-MIN-2025-4330 Extraction filter bypass for linking outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

7.5CVSS8.2AI score0.00805EPSS
SaveExploits2References13
Rows per page
Query Builder