DeutschShown in its original language — a full translation is planned for a future version.
CPython: Schwachstelle ermöglicht Manipulation von Dateien
view advisory published 2026-06-04
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CPython ausnutzen, um Dateien zu manipulieren.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-7774US | — | — | ||
tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extr… | ||||
02
references
External citations — patches, advisories, analysis.
- CPython Pull Request vom 2026-06-04external
- openSUSE Security Update OPENSUSE-SU-2026:11428-1 vom 2026-08-03external
- openSUSE Security Update OPENSUSE-SU-2026:11101-1 vom 2026-06-25external
- SUSE Security Update SUSE-SU-2026:3530-1 vom 2026-08-08external
- SUSE Security Update SUSE-SU-2026:3548-1 vom 2026-08-11external
- SUSE Security Update SUSE-SU-2026:3560-1 vom 2026-08-11external
- SUSE Security Update SUSE-SU-2026:3569-1 vom 2026-08-12external
- SUSE Security Update SUSE-SU-2026:3601-1 vom 2026-08-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan