Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

tar-fs

npm

filesystem bindings for tar-stream

View on github.com · View on npmjs.org

Security Advisories for tar-fs in npm

High
about 1 month ago

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball GSA_kwCzR0hTQS12ajc2LWMzZzYtcXI1ds4ABMnb

npm tar-fs
High
5 months ago

tar-fs can extract outside the specified dir with a specific tarball GSA_kwCzR0hTQS04Y2o1LTVydnYtd2Y0ds4ABIky

npm tar-fs
High
7 months ago

tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File GSA_kwCzR0hTQS1wcTY3LTJ3d3YtM3hqeM4ABGBR

npm tar-fs
High
over 6 years ago

Improper Input Validation in tar-fs MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgybWMtOGZnai0zd21y

npm tar-fs

Filter by Severity

High 4