← All credits

Stan Ulbrych (https://github.com/StanFromIreland)

10 vulnerability records and advisories credit this contributor.

tarfile hardlink fallback ignores custom extraction filter rejection via None

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

tarfile extraction filter bypass allows creation of directories outside the destination

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

Potential DoS via quadratic complexity in unicodedata.normalize()

tarfile opened in streaming mode mishandles EOF

tarfile extraction filter bypass allows escaping the destination directory