Threats tagged 'ghsa-v594-44hm-2j7p'

A vulnerability in the CPython tarfile module allows processing of tar archives with negative offsets without error, causing an infinite loop and deadlock during parsing of crafted archives. This can lead to denial of service by hanging the application. A mitigation patch involves overriding the _block method to raise an error on negative offsets.