CLEANSTART-2025-UT76860 npm package "tar" (aka node-tar) before versions 4

CVE-2021-37713 affects multiple packages. The npm package "tar" aka node-tar before versions 4. See references for individual vulnerability details...

CLEANSTART-2025-CI45713 npm package "tar" (aka node-tar) before versions 4

CVE-2021-37712 affects multiple packages. The npm package "tar" aka node-tar before versions 4. See references for individual vulnerability details...

CLEANSTART-2025-JE13711 npm package "tar" (aka node-tar) before versions 4

CVE-2021-37701 affects multiple packages. The npm package "tar" aka node-tar before versions 4. See references for individual vulnerability details...

CLEANSTART-2026-ZY10096 node-tar,a Tar for Node

Security vulnerability affects the nodejs package. node-tar,a Tar for Node...

CLEANSTART-2026-FG01147 node-tar is a Tar for Node

Security vulnerability affects the nodejs package. node-tar is a Tar for Node...

CLEANSTART-2026-JV46115 node-tar,a Tar for Node

Security vulnerability affects the npm package. node-tar,a Tar for Node...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability Reproduction node-tar...

CVE-2026-23745

CVE-2026-23745: node-tar Arbitrary File Overwrite Research: Joshua van Rijswijk Description PoC for CVE-2026-23745 , a high-severity path traversal vulnerability in node-tar 7.5.2. The library fails to sanitize absolute paths in the linkpath field for Hardlinks and Symlinks. This allows malicious...

CLEANSTART-2026-LD23096 node-tar is a tar archive manipulation library for Node

Security vulnerability affects the renovate package. node-tar is a tar archive manipulation library for Node...

CLEANSTART-2026-UR51520 node-tar is a full-featured Tar for Node

Security vulnerability affects the renovate package. node-tar is a full-featured Tar for Node...

CLEANSTART-2026-KI27736 node-tar is a tar archive manipulation library for Node

Security vulnerability affects the renovate package. node-tar is a tar archive manipulation library for Node...

CLEANSTART-2026-BX59752 npm package "tar" (aka node-tar) before versions 4

Security vulnerability affects the nodejs-24 package. The npm package "tar" aka node-tar before versions 4...

CLEANSTART-2026-DX32207 npm package "tar" (aka node-tar) before versions 4

Security vulnerability affects the nodejs-24 package. The npm package "tar" aka node-tar before versions 4...

CLEANSTART-2026-WP70960 npm package "tar" (aka node-tar) before versions 4

Security vulnerability affects the nodejs-24 package. The npm package "tar" aka node-tar before versions 4...

Astra Linux – Vulnerability in node-tar

The npm package “tar” also known as node-tar in versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has an arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent the extraction of absolute file paths by converting absolute paths into relative...

Astra Linux – Vulnerability in node-tar

The npm package “tar” also known as node-tar in versions prior to 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has a vulnerability related to arbitrary file creation/overwriting, due to insufficient symlink protection. node-tar aims to ensure that any file whose location would be modified by a symbolic link i...

CLEANSTART-2026-VH65256 node-tar is a tar archive manipulation library for Node

CVE-2026-59871 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...

CLEANSTART-2026-XE70573 node-tar is a tar archive manipulation library for Node

CVE-2026-59875 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...

CLEANSTART-2026-RB55722 node-tar is a tar archive manipulation library for Node

CVE-2026-59874 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...

CLEANSTART-2026-FT30855 node-tar is a tar archive manipulation library for Node

CVE-2026-73566 affects multiple packages. node-tar is a tar archive manipulation library for Node. See references for individual vulnerability details...