-
-
Notifications
You must be signed in to change notification settings - Fork 33.3k
Open
Labels
stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue
Description
The zipfile and tarfile modules both are used to process potentially untrusted inputs from the internet, most relevantly through Python packaging. zipfile and tarfile have security-focused settings to allow unpacking archives into specific directories with the expectation that the contents only affect the directory being unpacked into and not other directories. This gives an easy target to evaluate, whether the filesystem beyond the target directory is modified.
emmatyping
Metadata
Metadata
Assignees
Labels
stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytype-securityA security issueA security issue