21 matches found
Updated nodejs-tar packages fix security vulnerability
Untrusted tar file to symlink into an arbitrary location allowing file overwrites. CVE-2021-37712 Arbitrary file creation/overwrite and arbitrary code execution. CVE-2021-37701 Arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. CVE-2021-32803 Arbitrary File...
8.6CVSS3.9AI score0.15133EPSS
SaveExploits1References2
20