Threats Tagged 'ghsa-ghff-gcpf-9r9p'

CVE-2026-82049 is a high-severity vulnerability in the tarfile module of CPython 3.13 and earlier. Crafted tar archives containing a hard link to a symbolic link can cause extraction to modify file permissions or modification times outside the intended destination directory, or expose the contents of files outside the extraction tree. This affects multiple CPython versions prior to specific patch releases.