Threats tagged 'bit-libpython-2026-114583'

A vulnerability in libpython's tarfile module allows crafted tar archives with specially crafted symlink entries to bypass the tar_filter protection. This can cause tarfile.extractall() with filter="tar" to write files outside the intended extraction directory, potentially overwriting arbitrary files if the extracting process has sufficient permissions. The issue affects multiple Python 3.x versions prior to specific fixed releases.