The vulnerability of the tar-fs package from the tar-stream library in the Node.js software platform allows a hacker to write arbitrary files.

The vulnerability of the tar-fs package from the tar-stream library for processing tar format files on Node.js software platforms is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to write arbitrary fil...