google / google/security-research

python zip EOD bug (GHSA-hhv7-p4pg-wm6p) is CVE-2025-8291

Open
#272 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
4.6k
Forks
582
Avg merge
1d 5h
Merged PRs (30d)
3

Description

https://github.com/google/security-research/security/advisories/GHSA-hhv7-p4pg-wm6p

https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2025-12.json

https://mail.python.org/archives/list/security-announce@python.org/message/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/

https://www.cve.org/CVERecord?id=CVE-2025-8291

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.