Skip to content
OpenAdvisories

Vendor

npm

28 known vulnerabilities.

Products

node-tar 5 cli 5 arborist 2 http-live-simulator 1 cordova-plugin-ionic-webview 1 cached-path-relative 1 vditor 1 knightjs 1 erxes 1 npm mosca 1 mind-elixir 1 @claviska/jquery-minicolors 1 textangular 1 @fastify/oauth2 1 npm 1 buttle 1 tianma-static 1 takeapeek 1 iziModal 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2021-32804 Public exploit EPSS 15%

    Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

    The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning ab…

    npm node-tar tar node-tar Debian Ubuntu npm