fix: refuse to write files outside the target directory during sdist extraction

[radoering]

This has already been ensured with newer Python versions. Now, it is ensured with all supported versions, that means also with 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4.

Further, 3.9.17 has been removed from broken_tarfile_filter because we do not support Python 3.9 anymore.

In addition, test coverage is increased.

Note: A path traversal during sdist extraction is not as critical as it might seem because after extracting the sdist the project is built, which may result in arbitrary code execution by design.

Pull Request Check List

• Added tests for changed code.
• Updated documentation for changed code.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[dosubot]

Documentation Updates

1 document(s) were updated by changes in this PR:

CHANGELOG

View Changes

@@ -1,4 +1,10 @@
 # Change Log
+
+## [Unreleased]
+
+### Fixed
+
+- **Fix a path traversal vulnerability in sdist extraction that could allow malicious tarball files to write files outside the target directory on Python 3.10.0-3.10.12 and 3.11.0-3.11.4** ([#10837](https://github.com/python-poetry/poetry/pull/10837)).
 
 ## [2.3.3] - 2026-03-29
 

^{How did I do? Any feedback?}