tarfile 3.12

CVE-2007-4559

Path traversal in an upload extractor: tarfile.extractall on attacker archives

Target

GitHub repo or file URL

CVE or CWE

Package

Version

Code

Advisory evidence

Tavily

The run starts by searching for this advisory. What it finds decides the fix strategies, how many forks to run, and the requirements every patch is checked against.

Event log

Events stream here during a run.

Forks

One sandbox per candidate patch

ForkExploit reproducedSuite passesCross-checkAttacks blockedAuditOutcome

Base checkpoint not built yet

Each candidate patch gets its own sandbox, copied from the base checkpoint. Run a case to see them.