MEDIUM5.9PyPI
GHSA-f42x-p2mx-hm8r· CVE-2026-50558, PYSEC-2026-3606Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Modified: 8/4/2026
package
pkg:pypi/penelope-shell-handler
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Modified: 8/4/2026
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Modified: 8/4/2026