mirror of
https://github.com/python/cpython.git
synced 2025-12-08 06:10:17 +00:00
The `Tools/ssl/multissltests.py` script may extract a possibly untrusted tarball. Since the script does not necessarily use Python 3.14 or later (where the `"data"` filter became the default `tarfile` extraction filter), the user may theoretically suffer from a path traversal attack. Although the script should not be used in production and usually relies on downloading trusted sources, the `"data"` extraction filter is now explicitly used wherever relevant. |
||
|---|---|---|
| .. | ||
| make_ssl_data.py | ||
| multissltests.py | ||