5 matches found
Incorrect Type Conversion or Cast
Overview tar is a full-featured Tar for Node.js. Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast via the src/pax.ts file. An attacker can cause a process crash by providing all-digit PAX path or linkpath values that are coerced to JavaScript numbers, leading ...
7.5CVSS6.1AI score0.00644EPSS
SaveExploits1References2
20