| Summary | If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability. |
|---|---|
| Publication Date | April 28, 2026, 6:16 a.m. |
| Registration Date | April 29, 2026, 4:07 a.m. |
| Last Update | April 28, 2026, 3:16 p.m. |