Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/02/11 6:31 p.m.•20 views

nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()

nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...

9.8CVSS6.1AI score0.00935EPSS
SaveExploits2References5Affected Software1
NVD
NVD
•added 2026/02/11 6:16 p.m.•21 views

CVE-2025-69874

nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...

9.8CVSS0.00935EPSS
SaveExploits2References3
Rows per page
Query Builder