node-tar 安全漏洞

node-tar is a software package for file compression/decompression developed by Isaacs. Versions of node-tar prior to 7.5.11 contained a security vulnerability. This vulnerability stemmed from the ability to create symbolic links that could trick the system into pointing to directories other than...