https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T06:10:10.889022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4435 CVE-2025-4435 — Tarfile extracts filtered members when errorlevel=0 2026-10-16T06:10:10.910094+00:00

Affected: Python Software Foundation CPython

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.

 https://cve.radiocsirt.org/vuln/usn-7583-1 USN-7583-1 — python3.13, python3.12 vulnerabilities 2026-10-16T06:10:10.910150+00:00

Affected: Ubuntu:24.04:LTS: python3.12

It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss.