CVE-2026-3087
Vulnerability Description
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-22
Source
NVD
Discussion (0)
Add Comment
No comments yet. Be the first!