In brief
TAR archives can describe directories, files and links. Extraction therefore involves more than copying independent safe bytes.
Useful to know
TAR archives can describe directories, files and links. Extraction therefore involves more than copying independent safe bytes. [1]
Python 3.12 introduces extraction filters that should be selected deliberately for untrusted data. They do not solve every limit on memory, disk space or member count. Check the actual version’s documentation and extract into a defined workspace under explicit rules.
Sources
For further detail and to check the information: