Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/28 4:35 p.m.7 views

GHSA-34X7-HFP2-RC4V node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

Summary node-tar contains a vulnerability where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlink...

8.2CVSS7.4AI score0.00541EPSS
SaveExploits1References4
Rows per page
Query Builder