https://seclists.org/oss-sec/2026/q4/335: CPython: [CVE-2026-114583] tarfile.tar_filter path traversal bypass allows writing outside the extraction dictory
Published Oct 22, 2026
·Updated
Affected Software
1 affected component
Python CPython
Frequently Asked Questions
1
Where can I verify the affected CPython versions and the available fix?
The advisory directs readers to the CVE record for the latest affected-version information and to CPython pull request 160098 for the associated code change.
2
How severe is this issue?
The announcement classifies the vulnerability as MEDIUM severity.