AZL-62298
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-62298.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-62298
- Upstream
- Published
- 2025-06-03T13:15:20Z
- Modified
- 2026-04-01T05:20:02.536381Z
- Summary
- CVE-2025-4435 affecting package python3 3.9.19-19
- Details
-
When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.
- References