The new PyScript project lets you embed Python programs directly in HTML ... PyScript's GETTING-STARTED.md file provides documentation on how to ... which also includes numerous code examples.

The vulnerability is in the Python tarfile package, in code that uses un-sanitized tarfile.extract() function or the built-in defaults of tarfile.extractall(). It is a path traversal bug that ...