Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-4360

Опубликовано: 03 июл. 2026
Источник: msrc
EPSS Низкий

Описание

Tarfile.extract() doesn't fully respect filter parameter

EPSS

Процентиль: 18%
0.00264
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.

CVSS3: 5
redhat
около 1 месяца назад

In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.

CVSS3: 5.3
nvd
около 1 месяца назад

In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.

CVSS3: 5.3
debian
около 1 месяца назад

In the Tarfile.extract() function, the filter parameter is not passed ...

CVSS3: 5.3
github
около 1 месяца назад

In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.

EPSS

Процентиль: 18%
0.00264
Низкий