← All credits

Seth Larson (https://github.com/sethmlarson)

16 vulnerability records and advisories credit this contributor.

shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

Potential DoS via quadratic complexity in unicodedata.normalize()

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

Tarfile.extract() doesn't fully respect filter parameter

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

BaseCookie.js_output() does not neutralize embedded characters