Red Hat build of Apache Camel - HawtIO 4/tar
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| node-tar: Process crash via PAX numeric path type confusion | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported | |
| node-tar: Negative tar entry size causes infinite loop in archive replace | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | High | Fix reported | |
| node-tar: Decompression/parse DoS via unlimited input | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Critical | Fix reported | |
| node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported | |
| node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported |