Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

tar

npm

tar for node

View on github.com · View on npmjs.org

Security Advisories for tar in npm

Moderate
22 days ago

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection GSA_kwCzR0hTQS1yMjkyLTltaHAtNDU0bc4ABfq2

npm tar
Moderate
26 days ago

node-tar: Process crash via PAX numeric path type confusion GSA_kwCzR0hTQS13OHdyLXY4OTMtdmp2cM4ABcQ5

npm tar
Critical
26 days ago

node-tar: Decompression/parse DoS via unlimited input GSA_kwCzR0hTQS0yM2hwLTNqcmgtN2Zwd84ABcQ4

npm tar
High
26 days ago

node-tar: Negative tar entry size causes infinite loop in archive replace GSA_kwCzR0hTQS04eDg4LWM1bWYtN2o1d84ABcQ3

npm tar
Moderate
26 days ago

node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records GSA_kwCzR0hTQS1ndnd4LTU0d2gtcW05as4ABcQ2

npm tar
Moderate
2 months ago

node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) GSA_kwCzR0hTQS12bWYzLXc0NTUtNjh2aM4ABYrQ

npm tar
High
5 months ago

node-tar Symlink Path Traversal via Drive-Relative Linkpath GSA_kwCzR0hTQS05cHBqLXFtcW0tcTI1Ns4ABTbp

npm tar
High
5 months ago

tar has Hardlink Path Traversal via Drive-Relative Linkpath GSA_kwCzR0hTQS1xZmZwLTJyaGYtOWg5Ns4ABTJi

npm tar
High
6 months ago

Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction GSA_kwCzR0hTQS04M2czLTkyamctMjhjeM4ABSdM

npm tar
High
7 months ago

node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal GSA_kwCzR0hTQS0zNHg3LWhmcDItcmM0ds4ABRrK

npm tar
High
7 months ago

Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS GSA_kwCzR0hTQS1yNnEyLWh3NGgtaDQ2d84ABRUa

npm tar
High
7 months ago

node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization GSA_kwCzR0hTQS04cXE1LXJtNGotbXI5N84ABRMu

npm tar
Moderate
10 months ago

node-tar has a race condition leading to uninitialized memory exposure GSA_kwCzR0hTQS0yOXhwLTM3MnEteHFwaM4ABOCt

npm tar
Likely fork
Moderate
over 2 years ago

Denial of service while parsing a tar file due to lack of folders count validation GSA_kwCzR0hTQS1mNXgzLTMyZzYteHEzNs4AA6O0

npm node-tar
High
almost 5 years ago

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlyMnctMzk0di01M3Fj

npm tar
High
almost 5 years ago

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFxODktaHEzZi0zOTNw

npm tar
High
almost 5 years ago

Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU5NTUtOXdwci0zN2po

npm tar
High
about 5 years ago

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqZnEtZzQ1OC03cW05

npm tar
High
about 5 years ago

Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI2MjgtbWhtaC1xamh3

npm tar
High
over 7 years ago

Arbitrary File Overwrite in tar MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo0NG0tcW02cC1ocDdt

npm tar
High
almost 9 years ago

Symlink Arbitrary File Overwrite in tar MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdmanItM2ptbS00Zzl2

npm tar

Filter by Severity

High 14 Moderate 6 Critical 1