CVE-2026-4360 Tarfile.extract() doesn't fully respect filter parameter Information published. EPSS 0.00 CVE-2026-4360 US Microsoft Security · 3. 7. 10:04