Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Chuck Woodraska

#37389of 60,387
7.8Total CVSS
Vulnerabilities · 1
PT-2025-23610
2025-06-03
7.8
CVE-2025-4435
Tarfile
Tarfile
Python incorrectly handles tar archive extraction when using the filtering option. Specifically, when `TarFile.errorlevel` is set to `0` during extraction with a filter, the system fails to skip filtered members as documented, extracting them instead. This issue could allow a remote attacker to modify files in arbitrary filesystem locations, potentially leading to data loss or compromising the integrity of protected information.