9.4
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Description
CVE-2025-4517 / CVE-2025-4330 — Python tarfile Data Filter Bypass via PATHMAX Overflow Author: 0xDTC CVEs: CVE-2025-4517 / CVE-2025-4330 Advisory: GHSA-6r6c-684h-9j7p CPython Fix: PR 135037 Overview Python's tarfile.extractallfilter="data" is supposed...
Basic Information
ID
7AB33D68-B5EA-5FDB-ADD0-5EDB6DCB9186
Published
Feb 15, 2026 at 19:39
Modified
Feb 15, 2026 at 19:43