Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/02/11 6:31 p.m.16 views

nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()

nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...

9.8CVSS5.8AI score0.00841EPSS
SaveExploits2References5Affected Software1
NVD
NVD
added 2026/02/11 6:16 p.m.18 views

CVE-2025-69874

nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...

9.8CVSS0.00841EPSS
SaveExploits2References3
Rows per page
Query Builder