NodeJS-Tar-Symlink-Exploit-CVE-2026-29786

📦 CVE-2026-29786: Vulnerabilità Symlink in Tar di Node.js -yellow 📌 Riepilogo Esecutivo Questo repository documenta la ricerca su CVE-2026-29786 , una vulnerabilità ad alta gravità scoperta nel popolare pacchetto tar di Node.js. Il difetto consente a un attaccante di creare un archivio tar dannos...

Security Bulletin: Images built from IBM App Connect Enterprise Certified Containers may be vulnerable to arbitrary code execution due to CVE-2021-37712

Summary The Node.js tar module is used by the package manager npm, which is included in the IBM App Connect Enterprise Certified Container images. Use of npm when building images based on IBM App Connect Enterprise Certified Container images may be vulnerable to arbitrary code execution. This...