Skip to content

Validate tar link targets after filter fallback - #14156

Open
M0nd0R wants to merge 2 commits into
pypa:mainfrom
M0nd0R:security/tar-link-filter-fallback
Open

Validate tar link targets after filter fallback#14156
M0nd0R wants to merge 2 commits into
pypa:mainfrom
M0nd0R:security/tar-link-filter-fallback

Add news for tar link fallback fix

2b3b45b
Select commit
Loading
Failed to load commit list.
PSF Chronographer / Changelog entry succeeded Jul 9, 2026 in 6s

Chronographer: Good to go

Great! This change has been recorded to the chronicles

You are good at keeping records! Image source: Unsplash ID=bByhWydZLW0

See https://pip.pypa.io/dev/news-entry-failure for details.

Please, refer to the following document for more details on how to
craft a great change note for inclusion with your pull request:
https://pip.pypa.io/dev/news-entry-failure

Details

The following news fragments found: [<PatchedFile: news/14156.bugfix.rst>]

Pattern: re.compile('news/(?P<issue_number>[^\\./]+)\.(?P<fragment_type>removal|feature|bugfix|vendor|doc|process|trivial)(\.\d+)?(\.[^\\./]+)*\.rst$')