Alpine/python3: unknown
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to mo
Action: Upgrade python3 to 3.12.15-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.15-r0 | - |
Fixed versions
| 3.12.15-r0 |
Sources
- osv: ALPINE-CVE-2026-82049#Alpine:v3.23/python3
- https://security.alpinelinux.org/vuln/CVE-2026-82049
published · modified · JSON