CVE-2026-19672
1 advisory.
python/python CVE-2026-19672: medium 6.3
tarfile extraction filter bypass allows creation of directories outside the destination
Action: The 3.16.x fix (3.16.0) is not released yet.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.16.0 | - |
Fixed versions
| 3.16.0 |
Sources
- python-runtime: PSF-2026-38
- https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/
- https://www.cve.org/CVERecord?id=CVE-2026-19672
CVE-2026-19672 · published · modified · JSON