Red Hat JBoss Enterprise Application Platform Expansion Pack/tar
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| node-tar: Process crash via PAX numeric path type confusion | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported | |
| node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported | |
| node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records | tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs | npmRed Hat | Medium | Fix reported |