15-Year-Old Python Tarfile Vulnerability Affects Over 350,000 Open-Source Projects

The vulnerability is a path traversal attack in the extract and extractall functions in the tarfile module that allow an attacker to overwrite arbitrary files by adding the “..” sequence to filenames in a TAR archive.