Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-vj76-c3g6-qr5v
  • npm/tar-fs
 tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball 24 Sep 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-8cj5-5rvv-wf4v
  • npm/tar-fs
 tar-fs can extract outside the specified dir with a specific tarball 03 Jun 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-pq67-2wwv-3xjx
  • npm/tar-fs
 tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File 27 Mar 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-x2mc-8fgj-3wmr
  • npm/tar-fs
 Improper Input Validation in tar-fs 01 May 2019
  • Fix available
  • Severity - 7.5 (High)