Threats tagged 'bit-libpython-2026-87910'

A vulnerability in libpython's tarfile module causes the extraction filter to be bypassed when handling hardlink fallbacks on systems that do not support links. The filter function is called twice during extraction, but one call's return value is ignored, allowing members that should be rejected to be extracted.