GHSA-6r6c-684h-9j7p

Exploit Intelligence

• CVE‑2025‑4517 Proof‑of‑Concept Script (github-poc-repo)
• CVE‑2025‑4517 Proof‑of‑Concept Script (github-poc-repo)
• CVE-2025-4517 (CVSS 9.4 – Critical) A vulnerability in Python's `tarfile` (github-poc-repo)
• CVE-2025-4517 (CVSS 9.4 – Critical) A vulnerability in Python's `tarfile` (github-poc-repo)
• Python tarfile data filter bypass via PATH_MAX overflow in os.path.realpath() - CVE-2025-4517 / CVE-2025-4330 (github-poc-repo)
• Python tarfile data filter bypass via PATH_MAX overflow in os.path.realpath() - CVE-2025-4517 / CVE-2025-4330 (github-poc-repo)
• CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc-repo)
• CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc-repo)
• A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc-repo)
• A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc-repo)

…and 32 more exploits

Timeline

• CVE Published
• Apr 10, 2026 Security Advisory