A vulnerability in the Python programming language that has been ... fact that code in the extract function in Python's tarfile module explicitly trusts the information in the TarInfo object ...

A 15-year-old vulnerability in the open source Python programming language is still finding its way into live code, with the result that over 350,000 projects are at risk of potential supply chain ...