CVE-2025-64118 vulnerabilities

Vulnerabilities for packages: node-gyp, renovate...

Linux Distros Unpatched Vulnerability : CVE-2025-64118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-tar is a Tar for Node.js. In 7.5.1, using .t aka .list with sync: true to read tar entry contents returns uninitialized memory contents if tar file was...

@adobe/helix-deploy-plugin-edge (>=1.1.10, <=1.1.16), @cyclonedx/cdxgen (>=11.9.0, <=11.11.0) +22 more potentially affected by CVE-2025-64118 via tar (7.5.1)

tar NPM version 7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tar and may be impacted: - @adobe/helix-deploy-plugin-edge =1.1.10, =11.9.0, =2.0.27, =5.0.51, =0.45.2, =1.0.0-beta.2, =0.3.1, =4.4.2, =1.9.0, =1.6.1, =0.0.11, =1.0.1, =0.1.0, =0.2.2...

@adobe/helix-deploy-plugin-edge (>=1.1.10, <=1.1.16), @cyclonedx/cdxgen (>=11.9.0, <=11.11.0) +22 more potentially affected by CVE-2025-64118 via tar (7.5.1)

tar NPM version 7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tar and may be impacted: - @adobe/helix-deploy-plugin-edge =1.1.10, =11.9.0, =2.0.27, =5.0.51, =0.45.2, =1.0.0-beta.2, =0.3.1, =4.4.2, =1.9.0, =1.6.1, =0.0.11, =1.0.1, =0.1.0, =0.2.2...