CVE-2026-7774 — tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. Th — CVE Database · The Intelligence Room