Vulnerability detail
CVE-2026-3087
中Pythonに関する脆弱性
公開: 2026/04/28
更新: 2026/10/27
概要
If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.