Threats tagged 'bit-python-2026-87910'

A vulnerability in Python's tarfile module causes the extraction filter to be bypassed when handling hardlink fallback on systems that do not support links. The filter function is called twice during extraction, but one call's return value is ignored, allowing potentially unsafe members to be extracted. This issue affects multiple Python versions prior to their respective fixed releases.