CVE-2024-8088

Name of the Vulnerable Software and Affected Versions CPython (affected versions not specified)

Description There is a HIGH severity issue affecting the CPython "zipfile" module, specifically the "zipfile.Path" class, which can cause an infinite loop when iterating over names of entries in a maliciously crafted zip archive. This can occur when using methods like namelist(), iterdir(), etc. The issue applies when reading only metadata or extracting the contents of the zip archive. Programs that do not handle user-controlled zip archives are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.