Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Python tarfile.data_filter: Symlink Empty Name Validation Bypass

github.com 2026-06-13 查看中文 →

Security Advisory Medium Python

Affected:

Python 3.10
Python 3.11
Python 3.12
Python 3.13
Python 3.14

Referenced CVEs: CVE-2026-7774 · 6.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Path traversal vulnerability allows unauthorized access to authenticated uploads via file traversal 2026-08-25 GHSA-f9gq-r58q-4cw4 TREK OIDC Account Takeover via Unverified Email 2026-08-25 vLLM Unauthenticated DoS via DeepStream Backend Confusion 2026-08-25 SQL Injection in trek npm <= 3.0.22 via unvalidated column names (CWE-89) 2026-08-25 Gitea profile:read Scope Bypass Allows Admin Password Change and Privilege Escalation 2026-08-25

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro