18 matches found
Important: nodejs22
Issue Overview: node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as th...
8.2CVSS5.8AI score0.00408EPSS
SaveExploits3
20