Serhiy Storchaka

Extraction filter bypass for linking outside extraction directory

Arbitrary writes via tarfile realpath overflow

Bypass extraction filter to modify file metadata outside extraction directory

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

HTMLParser quadratic complexity when processing malformed inputs

Tarfile extracts filtered members when errorlevel=0

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Base64 decoding stops at first padded quad by default