Skip to content

[Security] tar <=7.5.20 — node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal #80

Description

@bitskc

Dependency Vulnerability

Package: tar
Severity: critical
Advisory: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
Advisory URL: GHSA-34x7-hfp2-rc4v
Affected Range: <=7.5.20

Description

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

Fix Recommendation

Run npm audit fix to resolve


This issue was automatically created by a dependency vulnerability scan.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions