CVE-2026-11972
2026-06-23
23h16 +00:00
23h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Unchecked Return Value The product does not check the return value from a method or function. |
||
| Unchecked Input for Loop Condition The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping. |
||
| Allocation of Resources Without Limits or Throttling The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
