CVE-2025-13462

ADVISORY - nist

Summary

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.

EPSS Score⁠: 0.00012 (0.018)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-20⁠

Improper Input Validation

CWE-434⁠

Unrestricted Upload of File with Dangerous Type

CWE-74⁠

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Impacted images

Advisories

Docker

CREATED

25 days ago

UPDATED

18 days ago

ADVISORY ID

CVE-2025-13462

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
python	dhi	-	-	>=0	Not yet available
alpine/python-3.10	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.11	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.12	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.13	apk	alpine	3.23	>=0	Not yet available
alpine/python-3.14	apk	alpine	3.23	>=0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

25 days ago

UPDATED

18 days ago

ADVISORY IDCVE-2025-13462⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-20⁠CWE-434⁠CWE-74⁠

CVSS SCORE

2low

Debian

CREATED

17 days ago

UPDATED

8 days ago

ADVISORY IDCVE-2025-13462⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

25 days ago

UPDATED

20 days ago

ADVISORY IDCVE-2025-13462⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Bitnami

CREATED

24 days ago

UPDATED

18 days ago

ADVISORY ID

BIT-libpython-2025-13462

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2low

Bitnami

CREATED

24 days ago

UPDATED

18 days ago

ADVISORY ID

BIT-python-2025-13462

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2low

Bitnami

CREATED

24 days ago

UPDATED

18 days ago

ADVISORY ID

BIT-python-min-2025-13462

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2low

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-6fhg-294p-4g63

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-fg6w-7xm9-6r66

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-mvj7-r888-j7qw

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-qr53-gv9q-3gpj

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY ID

MINI-wp9x-wghq-56jp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY