| Package | Affected versions | Patched versions |
|---|---|---|
| python | ≥ 3.10.0, < 3.10.12≥ 3.11.0, < 3.11.4≥ 3.7.0, < 3.8.17≥ 3.9.0, < 3.9.17< 3.6.16 | 3.10.123.11.43.8.173.9.173.6.16 |
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free