15-year-old Python flaw found in over 350,000 projects theregister.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from theregister.com Daily Mail and Mail on Sunday newspapers.
Over 350,000 unique open-source repositories are believed to be at risk of potential supply chain cyberattacks due to an unpatched 15-year-old vulnerability in Python’s tarfile module, which is a default module in any project using Python.
An unpatched flaw in more than 350,000 unique open source repositories leaves software applications vulnerable to exploit. The path traversal-related vulnerability is tracked as CVE-2007-4559.