All packages
Python tarfile module vulnerabilities
3 known CVE vulnerabilities in Python tarfile module, translated and rated.
- CVE-2026-11972High
The tarfile module in Python, when used with a file opened in streaming mode (mode="r|"), did not properly handle EOF, causing archive parsing to take exponentially longer.
- CVE-2025-4138High
Vulnerability in Python's tarfile module allows the extraction filter to be ignored, enabling symlink targets outside the destination directory and modification of file metadata. Affects TarFile.extractall() or TarFile.extract() with filter='data' or 'tar'.
- CVE-2024-12718Medium
A vulnerability in Python's tarfile module allows modifying file metadata or permissions outside the extraction directory when using filters 'data' or 'tar'. Affects Python 3.12+.