| Package | Affected versions | Patched versions |
|---|---|---|
| python | = 3.15.0≤ 3.14.4 |
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free