MEDIUM5.9PyPI
GHSA-f42x-p2mx-hm8r· CVE-2026-50558, PYSEC-2026-3606Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Modified: 8/4/2026
package
PyPI/penelope-shell-handler
pkg:pypi/penelope-shell-handler
MEDIUM5.9PyPI
PYSEC-2026-3606· CVE-2026-50558, GHSA-f42x-p2mx-hm8rPenelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Modified: 8/4/2026