diff --git a/datasets/speech_commands.py b/datasets/speech_commands.py
index 4a5ba10..2018feb 100644
--- a/datasets/speech_commands.py
+++ b/datasets/speech_commands.py
@@ -17,7 +17,26 @@ def _download():
         return
     urllib.request.urlretrieve('http://download.tensorflow.org/data/speech_commands_v0.02.tar.gz', loc)
     with tarfile.open(loc, 'r') as f:
-        f.extractall(raw_data_folder)
+        def is_within_directory(directory, target):
+            
+            abs_directory = os.path.abspath(directory)
+            abs_target = os.path.abspath(target)
+        
+            prefix = os.path.commonprefix([abs_directory, abs_target])
+            
+            return prefix == abs_directory
+        
+        def safe_extract(tar, path=".", members=None, *, numeric_owner=False):
+        
+            for member in tar.getmembers():
+                member_path = os.path.join(path, member.name)
+                if not is_within_directory(path, member_path):
+                    raise Exception("Attempted Path Traversal in Tar File")
+        
+            tar.extractall(path, members, numeric_owner=numeric_owner) 
+            
+        
+        safe_extract(f, raw_data_folder)
 
 
 def _process_data():