Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/01/28 12:20 a.m.51 views

CVE-2026-24842 node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal

node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path...

8.2CVSS0.00541EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/28 12:20 a.m.6 views

EUVD-2026-4909

node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path...

8.2CVSS6AI score0.00541EPSS
SaveExploits1References2
Rows per page
Query Builder