https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 01:34:10 +0000 https://cve.radiocsirt.org/vuln/cve-2025-4435 <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.</p> <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.</p> https://cve.radiocsirt.org/vuln/cve-2025-4435 https://cve.radiocsirt.org/vuln/usn-7583-1 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python3.12</p> <p>It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python3.12</p> <p>It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss.</p> https://cve.radiocsirt.org/vuln/usn-7583-1