← All credits

William Woodruff (https://github.com/woodruffw)

2 vulnerability records and advisories credit this contributor.

tarfile hardlink fallback ignores custom extraction filter rejection via None

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits