CVE-2025-8194
High · 7.5CVSS
7.5
EPSS
0.8%
Published
Jul 28, 2025
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A problem in Python's code for reading archive files can make programs freeze when they try to open certain specially made files.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Improper Input Validation
- Remediation
- Workaround Only
- Effort
- Low
- Patch risk
- Low
What it actually does
The tarfile module accepts tar archives containing negative offsets during extraction or member enumeration, causing the parser to enter an infinite loop that deadlocks the calling thread.
Why it matters to the business
Applications or services that process untrusted tar archives can become unresponsive, resulting in denial of service, delayed operations, and potential resource exhaustion across Python-based systems that depend on the tarfile module.
How an attack unfolds
An attacker creates a tar archive with specially crafted negative offset values, then supplies the archive to any Python code path that calls TarFile extraction or enumeration APIs; the parser never terminates, hanging the process indefinitely.
How to fix it
Update the CPython installation to the commit 57f5981d6260ed21266e0c26951b8564cc252bc2 or later; alternatively apply the mitigation patch provided at the referenced gist immediately after importing the tarfile module.
How to confirm the fix worked
Confirm the installed CPython tree contains commit 57f5981d6260ed21266e0c26951b8564cc252bc2, then execute a regression test that feeds a negative-offset tar archive to TarFile and verifies the call returns promptly without deadlock.
Typical attack path
- Craft a tar archive containing negative offset entries
- Deliver the archive to a target application or service that imports tarfile
- Trigger extraction or member listing on the malicious archive
- Observe the target process entering an unrecoverable loop and deadlock
How to detect it
Search application and system logs for Python processes that remain in a running state for abnormally long durations while handling tar archives; correlate with CPU or thread dumps showing tarfile module activity.
What your security team should do
- Prioritize patching Python environments that accept untrusted tar archives within the next 30 days
- Apply the temporary mitigation patch in any runtime that cannot be upgraded immediately
- Review and restrict use of tarfile.extract and getmembers on externally supplied archives until fixed
- Monitor EPSS trend and re-evaluate if exploit maturity increases
The record
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | python-unversioned-command | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3 | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-debug | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-devel | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-idle | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-libs | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-test | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:10 | python3-tkinter | 0 | 3.12.9-2.el10_0.3 |
| AlmaLinux:8 | platform-python | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | platform-python-debug | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | platform-python-devel | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | python3-idle | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | python3-libs | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | python3-test | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | python3-tkinter | 0 | 3.6.8-71.el8_10.alma.1 |
| AlmaLinux:8 | python3.11 | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-debug | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-devel | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-idle | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-libs | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-rpm-macros | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-test | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.11-tkinter | 0 | 3.11.13-2.el8_10 |
| AlmaLinux:8 | python3.12 | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-debug | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-devel | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-idle | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-libs | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-rpm-macros | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-test | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python3.12-tkinter | 0 | 3.12.11-2.el8_10 |
| AlmaLinux:8 | python39 | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-Cython | 0 | 0.29.21-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-Cython | 0 | 0.29.21-5.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-PyMySQL | 0 | 0.10.1-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-attrs | 0 | 20.3.0-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cffi | 0 | 1.14.3-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cffi | 0 | 1.14.3-2.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-chardet | 0 | 3.0.4-19.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cryptography | 0 | 3.3.1-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-debug | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-devel | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-idle | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-idna | 0 | 2.10-4.module_el8.10.0+3849+a48d89aa |
| AlmaLinux:8 | python39-iniconfig | 0 | 1.1.1-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-libs | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-lxml | 0 | 4.6.5-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-lxml | 0 | 4.6.5-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-mod_wsgi | 0 | 4.7.1-7.module_el8.10.0+3989+a618fe15.1 |
| AlmaLinux:8 | python39-more-itertools | 0 | 8.5.0-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy | 0 | 1.19.4-3.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-numpy-doc | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy-f2py | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy-f2py | 0 | 1.19.4-3.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-packaging | 0 | 20.4-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pip | 0 | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-pip-wheel | 0 | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-pluggy | 0 | 0.13.1-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-ply | 0 | 3.11-10.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-psutil | 0 | 5.8.0-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-psutil | 0 | 5.8.0-4.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-psycopg2 | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-psycopg2-doc | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-psycopg2-tests | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-py | 0 | 1.10.0-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11 | 0 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11 | 0 | 2.7.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-pybind11-devel | 0 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11-devel | 0 | 2.7.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-pycparser | 0 | 2.20-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyparsing | 0 | 2.4.7-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pysocks | 0 | 1.7.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pytest | 0 | 6.0.2-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyyaml | 0 | 5.4.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyyaml | 0 | 5.4.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-requests | 0 | 2.25.0-3.module_el8.9.0+3634+fb2a896c |
| AlmaLinux:8 | python39-rpm-macros | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-scipy | 0 | 1.5.4-5.module_el8.9.0+3634+fb2a896c |
| AlmaLinux:8 | python39-setuptools | 0 | 50.3.2-7.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-setuptools-wheel | 0 | 50.3.2-7.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-six | 0 | 1.15.0-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-test | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-tkinter | 0 | 3.9.20-2.module_el8.10.0+4040+9207bbc0 |
| AlmaLinux:8 | python39-toml | 0 | 0.10.1-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-urllib3 | 0 | 1.25.10-5.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-wcwidth | 0 | 0.2.5-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-wheel | 0 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-wheel-wheel | 0 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:9 | python-unversioned-command | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3 | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-debug | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-devel | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-idle | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-libs | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-test | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3-tkinter | 0 | 3.9.21-2.el9_6.2 |
| AlmaLinux:9 | python3.11 | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-debug | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-devel | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-idle | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-libs | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-test | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.11-tkinter | 0 | 3.11.11-2.el9_6.2 |
| AlmaLinux:9 | python3.12 | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-debug | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-devel | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-idle | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-libs | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-test | 0 | 3.12.9-1.el9_6.2 |
| AlmaLinux:9 | python3.12-tkinter | 0 | 3.12.9-1.el9_6.2 |
| Bitnami | libpython | 0 | 3.13.6 |
| Bitnami | libpython | 0 | 3.9.24 |
| Bitnami | python | 0 | 3.14.0 |
| Bitnami | python | 0 | 3.9.24 |
| Bitnami | python-min | 0 | 3.14.0 |
| Bitnami | python-min | 0 | 3.9.24 |
| Chainguard | python-3.10 | 0 | 3.10.19-r0 |
| Chainguard | python-3.10-base | 0 | 3.10.19-r0 |
| Chainguard | python-3.10-base-dev | 0 | 3.10.19-r0 |
| Chainguard | python-3.10-dev | 0 | 3.10.19-r1 |
| Chainguard | python-3.10-doc | 0 | 3.10.19-r0 |
| Chainguard | python-3.11 | 0 | 3.11.13-r4 |
| Chainguard | python-3.11-base | 0 | 3.11.13-r4 |
| Chainguard | python-3.11-base-dev | 0 | 3.11.13-r4 |
| Chainguard | python-3.11-dev | 0 | 3.11.13-r4 |
| Chainguard | python-3.11-doc | 0 | 3.11.13-r4 |
| Chainguard | python-3.12 | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-base | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-base-dev | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-dev | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-doc | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-privileged-netbindservice | 0 | 3.12.11-r6 |
| Chainguard | python-3.12-tk | 0 | 3.12.11-r6 |
| Chainguard | python-3.13 | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-base | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-base-dev | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-dev | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-doc | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-privileged-netbindservice | 0 | 3.13.6-r0 |
| Chainguard | python-3.13-tk | 0 | 3.13.6-r0 |
| Chainguard | python-3.9 | 0 | 3.9.25-r0 |
| Chainguard | python-3.9-base | 0 | 3.9.25-r0 |
| Chainguard | python-3.9-base-dev | 0 | 3.9.25-r0 |
| Chainguard | python-3.9-dev | 0 | 3.9.25-r0 |
| Chainguard | python-3.9-doc | 0 | 3.9.25-r0 |
| Debian:11 | python2.7 | 0 | No fix |
| Debian:11 | python3.9 | 0 | No fix |
| Debian:12 | python3.11 | 0 | No fix |
| Debian:13 | python3.13 | 0 | No fix |
| Debian:14 | python3.13 | 0 | 3.13.6-1 |
| Mageia:9 | python3 | 0 | 3.10.18-1.4.mga9 |
| SUSE:Enterprise Storage 7.1 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Enterprise Storage 7.1 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Micro 5.1 | python3 | 0 | 3.6.15-150000.3.185.2 |
| SUSE:Linux Enterprise Micro 5.1 | python3-core | 0 | 3.6.15-150000.3.185.1 |
| SUSE:Linux Enterprise Micro 5.2 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Micro 5.2 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Micro 5.3 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Micro 5.3 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Micro 5.4 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Micro 5.4 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Micro 5.5 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Micro 5.5 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | python311-core | 0 | 3.11.13-150600.3.35.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python311-core | 0 | 3.11.13-150600.3.35.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP7 | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | python | 0 | 2.7.18-150000.83.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | python-base | 0 | 2.7.18-150000.83.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python | 0 | 2.7.18-150000.83.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python-base | 0 | 2.7.18-150000.83.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP6 | python311 | 0 | 3.11.13-150600.3.35.2 |
| SUSE:Linux Enterprise Module for Python 3 15 SP6 | python311-core | 0 | 3.11.13-150600.3.35.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP6 | python312 | 0 | 3.12.11-150600.3.36.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP6 | python312-core | 0 | 3.12.11-150600.3.36.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311 | 0 | 3.11.13-150600.3.35.2 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311-core | 0 | 3.11.13-150600.3.35.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python3-core | 0 | 3.6.15-150300.10.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | python3 | 0 | 3.6.15-150300.10.97.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | python3-core | 0 | 3.6.15-150300.10.97.1 |
Related vulnerabilities
- CVE-2025-8291 The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory… Also affects python-unversioned-command
- CVE-2024-12718 Allows modifying some file metadata (e.g. Also affects python-unversioned-command
- CVE-2025-4517 Allows arbitrary filesystem writes outside the extraction directory during extraction… Also affects python-unversioned-command
- CVE-2025-4138 Allows the extraction filter to be ignored, allowing symlink targets to point outside the… Also affects python-unversioned-command
- CVE-2025-4330 Allows the extraction filter to be ignored, allowing symlink targets to point outside the… Also affects python-unversioned-command
- CVE-2025-4435 When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior… Also affects python-unversioned-command
- CVE-2024-11168 The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts… Also affects platform-python
- CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path names… Also affects platform-python