[GHSA-4xh5-x5gv-qwph] pip's fallback tar extraction doesn't check symbolic links point to extraction directory#6240

akarve wants to merge 1 commit intoakarve/advisory-improvement-6240github/advisory-database:akarve/advisory-improvement-6240from

akarve-GHSA-4xh5-x5gv-qwphgithub/advisory-database:akarve-GHSA-4xh5-x5gv-qwphCopy head branch name to clipboard