Lucene search

K
osvGoogleOSV:USN-4863-1
HistoryMar 15, 2021 - 10:50 p.m.

node-fstream vulnerability

2021-03-1522:50:59
Google
osv.dev
7
fstream vulnerability
crafted tarballs
arbitrary files
filesystem
software

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

62.2%

It was discovered that fstream incorrectly handled certain crafted
tarballs. An attacker could use this vulnerability to write arbitrary files
to the filesystem.