CVE-2025-4435 — Tarfile extracts filtered members when errorlevel=0
When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual beha…
Published: 2025-06-03 · CVSS: 7.5 · CVSS 3.1
When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7