Old Vulnerability Still Haunting Open Source Projects!

Brandon Geraci breaks down a path traversal vulnerability in TAR file handling, first discovered in 2007 and rediscovered in 2022. It's still estimated to affect roughly 350,000 open source projects today, most inherited transitively through dependencies nobody chose directly. Clipped from Brandon's talk, "Ungating the Supply Chain: The Future of Artifact Security," at a recent OSA Community event. Watch the full talk here: https://youtu.be/IFyskxjdhXg?si=CAnPboX3Dx0vNl0B Learn more about Artifact Keeper: https://github.com/artifact-keeper/artifact-keeper Follow OpenTeams on LinkedIn: https://www.linkedin.com/company/openteams Visit us: https://openteams.com/ Subscribe for more from the OpenTeams team. #Python #OpenSource #Nebi #Reproducibility