[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-4435":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":88,"related":89,"reserved_at":9,"published_at":106,"modified_at":107,"state":108,"summary":109,"references_raw":118,"kevs":167,"epss":168,"epss_history":171,"metrics":443,"affected":451},"CVE-2025-4435","When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-682","Incorrect Calculation","The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.","weakness","Draft","Pillar","High",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-128","Integer Attacks",[],{"id":25,"name":26,"techniques":27},"CAPEC-129","Pointer Manipulation",[],[],[],[],[32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86],{"_key":33},"SUSE-SU-2025:02297-1",{"_key":35},"SUSE-SU-2025:02359-1",{"_key":37},"SUSE-SU-2025:02717-1",{"_key":39},"SUSE-SU-2025:02778-1",{"_key":41},"SUSE-SU-2025:02427-1",{"_key":43},"SUSE-SU-2025:02767-1",{"_key":45},"SUSE-SU-2025:20492-1",{"_key":47},"SUSE-SU-2025:20539-1",{"_key":49},"SUSE-SU-2026:0210-1",{"_key":51},"OPENSUSE-SU-2025:15289-1",{"_key":53},"OPENSUSE-SU-2025:15713-1",{"_key":55},"MGASA-2025-0280",{"_key":57},"USN-7583-1",{"_key":59},"UBUNTU-CVE-2025-4435",{"_key":61},"DEBIAN-CVE-2025-4435",{"_key":63},"RHSA-2025:10026",{"_key":65},"RHSA-2025:10028",{"_key":67},"RHSA-2025:10031",{"_key":69},"RHSA-2025:10128",{"_key":71},"RHSA-2025:10136",{"_key":73},"RHSA-2025:10140",{"_key":75},"RHSA-2025:10148",{"_key":77},"RHSA-2025:10189",{"_key":79},"RHSA-2025:10399",{"_key":81},"RHSA-2025:10484",{"_key":83},"RHSA-2025:10602",{"_key":85},"RHSA-2025:23530",{"_key":87},"RHSA-2025:9918",[],[90,91,92,93,94,95,96,97,98,99,100,101,102,104],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":103},"CGA-47CW-8QRJ-8M4R",{"_key":105},"CGA-G7WF-VXQ2-34Q4","2025-06-03T12:59:06.792Z","2026-04-21T20:16:34.166Z","Deferred",{"cisa_kev":110,"cisa_ransomware":110,"cisa_vendor":9,"epss_severity":111,"epss_score":112,"severity":113,"severity_score":114,"severity_version":115,"severity_source":116,"severity_vector":117,"severity_status":108},false,"low",0.00541,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[119,125,130,135,139,143,147,151,155,159,163],{"url":120,"sources":121,"tags":123},"https://github.com/python/cpython/issues/135034",[116,122],"nvd",[124],"Issue Tracking",{"url":126,"sources":127,"tags":128},"https://github.com/python/cpython/pull/135037",[116,122],[129],"Patch",{"url":131,"sources":132,"tags":133},"https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/",[116,122],[134],"Vendor Advisory",{"url":136,"sources":137,"tags":138},"https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a",[116,122],[129],{"url":140,"sources":141,"tags":142},"https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a",[116,122],[129],{"url":144,"sources":145,"tags":146},"https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da",[116,122],[129],{"url":148,"sources":149,"tags":150},"https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01",[116,122],[129],{"url":152,"sources":153,"tags":154},"https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9",[116,122],[129],{"url":156,"sources":157,"tags":158},"https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e",[116,122],[129],{"url":160,"sources":161,"tags":162},"https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a",[116,122],[129],{"url":164,"sources":165,"tags":166},"https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1",[116,122],[129],[],{"date":169,"score":112,"percentile":170},"2026-06-04",0.68015,[172,176,179,182,185,188,191,194,198,201,203,206,209,212,215,219,222,225,228,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,282,285,288,291,294,297,300,303,306,309,312,315,317,320,323,326,329,332,335,339,342,345,348,351,354,357,360,363,366,370,373,376,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,431,434,437,440],{"date":173,"score":174,"percentile":175},"2025-11-04",0.00051,0.15706,{"date":177,"score":174,"percentile":178},"2025-11-05",0.15733,{"date":180,"score":174,"percentile":181},"2025-11-06",0.15827,{"date":183,"score":174,"percentile":184},"2025-11-07",0.15849,{"date":186,"score":174,"percentile":187},"2025-11-08",0.15859,{"date":189,"score":174,"percentile":190},"2025-11-09",0.15831,{"date":192,"score":174,"percentile":193},"2025-11-10",0.15785,{"date":195,"score":196,"percentile":197},"2025-11-11",0.00079,0.24033,{"date":199,"score":196,"percentile":200},"2025-11-12",0.24069,{"date":202,"score":196,"percentile":200},"2025-11-13",{"date":204,"score":196,"percentile":205},"2025-11-14",0.24059,{"date":207,"score":196,"percentile":208},"2025-11-15",0.24045,{"date":210,"score":196,"percentile":211},"2025-11-16",0.24,{"date":213,"score":196,"percentile":214},"2025-11-17",0.23956,{"date":216,"score":217,"percentile":218},"2025-11-18",0.00122,0.26517,{"date":220,"score":217,"percentile":221},"2025-11-19",0.26538,{"date":223,"score":217,"percentile":224},"2025-11-20",0.26544,{"date":226,"score":196,"percentile":227},"2025-11-21",0.23901,{"date":229,"score":230,"percentile":231},"2025-11-22",0.00061,0.18912,{"date":233,"score":230,"percentile":234},"2025-11-23",0.18883,{"date":236,"score":196,"percentile":237},"2025-11-24",0.23816,{"date":239,"score":196,"percentile":240},"2025-11-25",0.23803,{"date":242,"score":196,"percentile":243},"2025-11-26",0.23789,{"date":245,"score":196,"percentile":246},"2025-11-27",0.23787,{"date":248,"score":196,"percentile":249},"2025-11-28",0.23767,{"date":251,"score":196,"percentile":252},"2025-11-29",0.23748,{"date":254,"score":196,"percentile":255},"2025-11-30",0.23742,{"date":257,"score":196,"percentile":258},"2025-12-01",0.23775,{"date":260,"score":196,"percentile":261},"2025-12-02",0.2379,{"date":263,"score":196,"percentile":264},"2025-12-03",0.23805,{"date":266,"score":196,"percentile":267},"2025-12-04",0.2373,{"date":269,"score":196,"percentile":270},"2025-12-05",0.23778,{"date":272,"score":196,"percentile":273},"2025-12-06",0.23776,{"date":275,"score":196,"percentile":276},"2025-12-07",0.23739,{"date":278,"score":196,"percentile":279},"2025-12-08",0.23747,{"date":281,"score":196,"percentile":264},"2025-12-09",{"date":283,"score":196,"percentile":284},"2025-12-10",0.23874,{"date":286,"score":196,"percentile":287},"2025-12-11",0.23908,{"date":289,"score":196,"percentile":290},"2025-12-12",0.23924,{"date":292,"score":196,"percentile":293},"2025-12-13",0.23925,{"date":295,"score":196,"percentile":296},"2025-12-14",0.23894,{"date":298,"score":196,"percentile":299},"2025-12-15",0.23872,{"date":301,"score":196,"percentile":302},"2025-12-16",0.23892,{"date":304,"score":196,"percentile":305},"2025-12-17",0.23972,{"date":307,"score":230,"percentile":308},"2025-12-18",0.19268,{"date":310,"score":230,"percentile":311},"2025-12-19",0.19288,{"date":313,"score":230,"percentile":314},"2025-12-20",0.19262,{"date":316,"score":196,"percentile":293},"2025-12-21",{"date":318,"score":196,"percentile":319},"2025-12-22",0.23885,{"date":321,"score":196,"percentile":322},"2025-12-23",0.23861,{"date":324,"score":196,"percentile":325},"2025-12-24",0.2387,{"date":327,"score":196,"percentile":328},"2025-12-25",0.23948,{"date":330,"score":196,"percentile":331},"2025-12-26",0.23934,{"date":333,"score":196,"percentile":334},"2025-12-27",0.23931,{"date":336,"score":337,"percentile":338},"2025-12-28",0.00091,0.26125,{"date":340,"score":337,"percentile":341},"2025-12-29",0.26094,{"date":343,"score":337,"percentile":344},"2025-12-30",0.26092,{"date":346,"score":337,"percentile":347},"2025-12-31",0.26155,{"date":349,"score":337,"percentile":350},"2026-01-01",0.26261,{"date":352,"score":337,"percentile":353},"2026-01-02",0.26259,{"date":355,"score":337,"percentile":356},"2026-01-03",0.26242,{"date":358,"score":337,"percentile":359},"2026-01-04",0.26144,{"date":361,"score":337,"percentile":362},"2026-01-05",0.2613,{"date":364,"score":337,"percentile":365},"2026-01-06",0.26137,{"date":367,"score":368,"percentile":369},"2026-01-07",0.00086,0.25397,{"date":371,"score":368,"percentile":372},"2026-01-08",0.25441,{"date":374,"score":368,"percentile":375},"2026-01-09",0.25419,{"date":377,"score":368,"percentile":369},"2026-01-10",{"date":379,"score":368,"percentile":380},"2026-01-11",0.25376,{"date":382,"score":368,"percentile":383},"2026-01-12",0.25332,{"date":385,"score":368,"percentile":386},"2026-01-13",0.25308,{"date":388,"score":368,"percentile":389},"2026-01-14",0.25358,{"date":391,"score":368,"percentile":392},"2026-01-15",0.25348,{"date":394,"score":368,"percentile":395},"2026-01-16",0.2538,{"date":397,"score":368,"percentile":398},"2026-01-17",0.25387,{"date":400,"score":196,"percentile":401},"2026-01-18",0.23792,{"date":403,"score":196,"percentile":404},"2026-01-19",0.23745,{"date":406,"score":196,"percentile":407},"2026-01-20",0.23714,{"date":409,"score":196,"percentile":410},"2026-01-21",0.23659,{"date":412,"score":196,"percentile":413},"2026-01-22",0.23646,{"date":415,"score":196,"percentile":416},"2026-01-23",0.23732,{"date":418,"score":196,"percentile":419},"2026-01-24",0.23744,{"date":421,"score":230,"percentile":422},"2026-01-25",0.19098,{"date":424,"score":230,"percentile":425},"2026-01-26",0.18999,{"date":427,"score":196,"percentile":428},"2026-01-27",0.23539,{"date":430,"score":196,"percentile":428},"2026-01-28",{"date":432,"score":196,"percentile":433},"2026-01-29",0.23494,{"date":435,"score":196,"percentile":436},"2026-01-30",0.23491,{"date":438,"score":196,"percentile":439},"2026-01-31",0.23488,{"date":441,"score":196,"percentile":442},"2026-02-01",0.23528,[444,449],{"source":116,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":445,"cvss_v4_0":9},{"baseScore":114,"baseSeverity":446,"vectorString":117,"impactScore":447,"exploitabilityScore":448},"HIGH",6,10,{"source":122,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":450,"cvss_v4_0":9},{"baseScore":114,"baseSeverity":446,"vectorString":117,"impactScore":447,"exploitabilityScore":448},[452],{"ecosystem":9,"name":453,"vendor":454,"product":455,"cpe_part":456,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":457},"CPython","python software foundation","cpython","a",[458,463,468,470,474,478,482],{"version":459,"is_range":460,"range_type":116,"version_start":9,"version_start_type":9,"version_end":461,"version_end_type":462,"fixed_in":9},"\u003C 3.9.23",true,"3.9.23","excluding",{"version":464,"is_range":460,"range_type":116,"version_start":465,"version_start_type":466,"version_end":467,"version_end_type":462,"fixed_in":9},">= 3.10.0, \u003C 3.10.18","3.10.0","including","3.10.18",{"version":469,"is_range":460,"range_type":116,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":462,"fixed_in":9},"\u003C 3.10.18",{"version":471,"is_range":460,"range_type":116,"version_start":472,"version_start_type":466,"version_end":473,"version_end_type":462,"fixed_in":9},">= 3.11.0, \u003C 3.11.13","3.11.0","3.11.13",{"version":475,"is_range":460,"range_type":116,"version_start":476,"version_start_type":466,"version_end":477,"version_end_type":462,"fixed_in":9},">= 3.12.0, \u003C 3.12.11","3.12.0","3.12.11",{"version":479,"is_range":460,"range_type":116,"version_start":480,"version_start_type":466,"version_end":481,"version_end_type":462,"fixed_in":9},">= 3.13.0, \u003C 3.13.4","3.13.0","3.13.4",{"version":483,"is_range":460,"range_type":116,"version_start":484,"version_start_type":466,"version_end":485,"version_end_type":462,"fixed_in":9},">= 3.14.0a1, \u003C 3.14.0b3","3.14.0a1","3.14.0b3"]