Skip to content
OpenAdvisories

Package · npm

@vltpkg/tar

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.9
    CVE-2026-24909

    vlt Mishandles Path Sanitization for tar

    vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.

    vlt vlt @vltpkg/tar npm