Skip to content
OpenAdvisories

Package · Debian

node-tar-fs

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12905 Public exploit

    tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File

    An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized fi…

    tar-fs node-tar-fs node-tar-fs Debian Ubuntu npm