The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4330)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-4330

high Nessus Plugin ID 252093

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.8 Jul 13, 2026, 11:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607132353
Version 1.7 Jul 11, 2026, 6:31 AM Plugin metadata Detection (updated detection logic) Plugin Feed: 202607110631
Version 1.6 Nov 3, 2025, 9:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511032125
Version 1.5 Oct 27, 2025, 11:56 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.2 Sep 1, 2025, 12:37 PM CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata CVSS metrics ("Cvssv4 score" set to 0.0) Plugin Feed: 202509011237
Version 1.1 Aug 19, 2025, 8:36 AM New Plugin Feed: 202508190836