tar-fs
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball | tar-fsCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 | npmRed Hat | High | Fix reported | |
| tar-fs can extract outside the specified dir with a specific tarball | tar-fsOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 | npmRed Hat | High | Fix reported | |
| tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File | tar-fsRed Hat Ceph Storage 7/ceph | npmRed Hat | High | Fix reported | |
| Improper Input Validation in tar-fs | tar-fs | npm | High | Fix reported |