CVE Feed

    Dashboard / CVE / CVE-2025-4435

    CVE-2025-4435

    When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.

    Published:Jun 3, 2025
    Last Modified:Apr 22, 2026
    EPS:Jun 3, 2025
    EPSS Score:0.00541
    CVSS Score:7.5

    Affected Products

    Vendor
    Python
    Product
    Cpython
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Eus Long Life
    Vendor
    Redhat
    Product
    Rhel Tus

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-15310 (CVSS 2.1) — When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacke…
    CVE-2026-19672 (CVSS 6.3) — The tarfile module's tar and data extraction filters created directories outside the destination for members…
    CVE-2026-15806 (CVSS 6) — The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRe…
    CVE-2026-17084 (CVSS 6) — The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unico…
    CVE-2026-18503 (CVSS 2.4) — Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and …
    CVE-2026-6879 (CVSS 2) — `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath …
    CVE-2026-15308 (CVSS 8.7) — The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated untermi…
    CVE-2026-4360 (CVSS 2) — In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An a…
    CVE-2026-11972 (CVSS 8.2) — When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not …
    CVE-2026-0864 (CVSS 4.1) — When using the "configparser" module to write configuration files containing multi-line text values with carri…

    References

    https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da
    https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9
    https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
    https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e
    https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a
    https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
    https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01
    https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1
    https://github.com/python/cpython/issues/135034
    https://github.com/python/cpython/pull/135037
    https://mail.python.org/archives/list/[email protected]/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High