CVE-2026-35592: Tarfile Symlink Escape Extractioncve-2026-35592-tarfile-symlink-escape-extraction
Extracting tar archives without validating member symlinks allows symlink escape attacks. Path prefix validation on members often evaluates raw strings prior to extraction, failing to account for symlinks created dynamically on disk during the extraction process. Validate archive members by checking `issym()`, `islnk()`, and resolving `linkname` to ensure ex
