← All credits
Caleb Brown (Google)
4 vulnerability records and advisories credit this contributor.
CVE-2025-4330
Extraction filter bypass for linking outside extraction directory
CVE-2025-4517
Arbitrary writes via tarfile realpath overflow
CVE-2025-8291
ZIP64 End of Central Directory (EOCD) Locator record offset not checked
CVE-2025-4138
Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory