The vulnerability of the tar-fs module for working with tar archives lies in the improper handling of symbolic links before accessing files. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the tar-fs module for working with tar archives is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality [CVE-2025-59343]

Summary Node.js module tar-fs is used by IBM App Connect Enterprise Certified Container for processing tar files and streams. IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported...

tar-fs: tar-fs symlink validation bypass

A symlink validation bypass flaw has been discovered in the npm tar-fs library. Affected versions are vulnerable to a symlink validation bypass if the destination directory is predictable with a specific tarball...