VULNERABILITY INTELLIGENCE

CVE-2026-11972

EPSS probability0.71%
CISA KEVNot currently listed
Published2026-06-23
Last modified2026-10-25

Description

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

Weakness classification

  • cna@python.org: CWE-252

Primary references