Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/24 4:26 p.m.19 views

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

Summary node-tar npm tar contains an uncontrolled-recursion stack-exhaustion DoS in the internal mapHas helper used by filesFilter. When a consumer calls tar.t... or tar.x... with a non-empty member-selection list, node-tar installs a filter that closes over the recursive mapHas src/list.ts:33-44...

7.5CVSS6.6AI score0.0038EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder