← All credits

Ethan Furman (https://github.com/ethanfurman)

2 vulnerability records and advisories credit this contributor.

CVE-2026-114583

tar filter allows writing outside destination via empty-named symlink

tarfile extraction filter bypass allows creation of directories outside the destination