#archive-extraction

0 stories this week · 0 this month · 2 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

oss-securitySep 14, 2026

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Python discloses CVE-2026-82049: tarfile extraction filters can be bypassed via hard links to symlinks, enabling file modification and content disclosure.

archive-extraction cpython

oss-securitySep 11, 2026

CPython: [CVE-2026-87910] tarfile hardlink fallback ignores custom extraction filter rejection via None

CPython CVE-2026-87910: tarfile's hardlink fallback ignores custom extraction filters that reject entries via None, rated MEDIUM severity.

archive-extraction cpython

Stories tagged #archive-extraction

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

CPython: [CVE-2026-87910] tarfile hardlink fallback ignores custom extraction filter rejection via None