1 matches found
Important: nodejs24
Issue Overview: node-tar is a Tar for Node.js. The node-tar library = 7.5.2 fails to sanitize the linkpath of Link hardlink and SymbolicLink entries when preservePaths is false the default secure behavior. This allows malicious archives to bypass the extraction root restriction, leading to...
8.8CVSS6.2AI score0.00608EPSS
SaveExploits4
20