Seth Larson

Tarfile infinite loop during parsing with negative member offset

Tarfile extracts filtered members when errorlevel=0

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

pip self-update functionality can import newly installed modules after wheel installation

Quadratic complexity in node ID cache clearing

Folding email comments of unfoldable characters doesn't preserve parenthesis

Infinite loop when iterating over zip archive entry names from zipfile.Path

Email header injection due to unquoted newlines

Regular-expression DoS when parsing TarFile headers