CVE Vulnerabilities

CVE-2026-11972

Unchecked Return Value

Published: Jun 23, 2026 | Modified: Jun 24, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

When using the tarfile module with a file opened in streaming mode (mode=r|) the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

Weakness

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Potential Mitigations

References