https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:12:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-11940 <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>tarfile.extractall() with the &#39;data&#39; or &#39;tar&#39; filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it&#39;s archived location but recreated it at the hardlink&#39;s shallower path, letting a relative target the filter judged contained escape the destination directory.  This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.</p> <p><strong>Affected:</strong> Python Software Foundation CPython</p> <p>tarfile.extractall() with the &#39;data&#39; or &#39;tar&#39; filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it&#39;s archived location but recreated it at the hardlink&#39;s shallower path, letting a relative target the filter judged contained escape the destination directory.  This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.</p> https://vulnerability.circl.lu/vuln/cve-2026-11940