Visit Website →

Recent Items

CVE-2024-6232 — Regular-expression DoS when parsing TarFile headers

Affected: Python Software Foundation CPython, python cpython

There is a MEDIUM severity vulnerability affecting CPython.

Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.