https://discuss.python.org/t/policies-for-tarfile-extractall-a-k-a-fixing-cve-2007-4559/23149/16
Policies for tarfile.extractall, a.k.a. fixing CVE-2007-4559 - #16 by encukou - Core Development -...
Jan 30, 2023 - Hello, You might have heard of CVE-2007-4559, the tarfile directory traversal vulnerability. Discussion about it has been going on and off since 2007, but no...