CVE-2026-40491: Archive Extractall Path Traversal
Calling `extractall()` on an archive object without validating member paths can result in a path traversal (ZipSlip/TarSlip) vulnerability. Verify that the archive members resolve strictly within the intended target directory, pass a restrictively filtered `members=` list, or use `filter='data'` (Python 3.12+).
greprules fetch cve-2026-40491-archive-extractall-path-traversal --engine opengrepDescription
Calling `extractall()` on an archive object without validating member paths can result in a path traversal (ZipSlip/TarSlip) vulnerability. Verify that the archive members resolve strictly within the intended target directory, pass a restrictively filtered `members=` list, or use `filter='data'` (Python 3.12+).
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.