CVE-2020-28948

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Date published : 2020-11-19

https://www.drupal.org/sa-core-2020-013

https://www.debian.org/security/2020/dsa-4817