tar filter allows writing outside destination via empty-named symlink

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

tarfile extraction filter bypass allows creation of directories outside the destination

Potential DoS via quadratic complexity in unicodedata.normalize()

BaseCookie.js_output() does not neutralize embedded characters

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Base64 decoding stops at first padded quad by default

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

tarfile hardlink fallback ignores custom extraction filter rejection via None

HTTP client proxy tunnel headers not validated for CR/LF

Configuration Injection via Carriage Return (\r) in write() method

Tarfile.extract() doesn't fully respect filter parameter

CPython >3.11 Insecure Input Validation resulting in privilege escalation

Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target