In Python 3.8.4, sys.path restrictions specified in a python38.pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>.pth file (e.g., the python._pth file) is not affected.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15801.json"