Defined in 3 files
Last patched
_extract_member in python/cpython was changed by 6 published CVE fixes between 2025 and 2026, in 7 distinct patches that added or removed 103 lines in total.
The name occurs in 3 files: Lib/tarfile.py, Lib/zipfile.py, Lib/zipfile/__init__.py.
python/cpython has 118 CVEs with a located fix in total, so 5% of them touched this function.
Every published CVE whose fix changed _extract_member, newest first, with the lines each fix touched.
CVE-2026-3087 · Lib/zipfile/__init__.py · lines 1797–1821 · +15 −5
CVE-2026-3087 · Lib/zipfile.py · lines 1700–1720 · +13 −5
CVE-2024-12718 · Lib/tarfile.py · lines 2580–2618 · +10 −3 in 2 hunks
CVE-2025-4435 · Lib/tarfile.py · lines 2580–2618 · +10 −3 in 2 hunks
CVE-2025-4138 · Lib/tarfile.py · lines 2580–2618 · +10 −3 in 2 hunks
CVE-2025-4330 · Lib/tarfile.py · lines 2580–2618 · +10 −3 in 2 hunks
CVE-2025-4517 · Lib/tarfile.py · lines 2580–2618 · +10 −3 in 2 hunks
Get an alert when the next CVE fix lands in python/cpython, with the patched functions.
Monitor cpython CVEsFunctions in the same files that CVE fixes also changed.
Functions in python/cpython changed by the most CVE fixes.
Common questions about CVE fixes to _extract_member.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
