A vulnerability in the Python programming language that has been ... the built-in defaults of tarfile.extractall(). It is a path traversal bug that enables an attacker to overwrite arbitrary ...