1 matches found
Important: python3.13
Issue Overview: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the...
8.2CVSS6AI score0.00811EPSS
SaveExploits0
20