Read the docs

Npmjs

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Npmjs records in CISA KEV

No Npmjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Npm 8 records MEDIUM Tar 3 records MEDIUM Arborist 2 records LOW Hosted-git-info 1 record LOW Npm-user-validate 1 record LOW Semver 1 record HIGH

Records

3 records in Tar · all components

TI-2021-15576 CVE-2021-37701 · GHSA-9r2w-394v-53qc

Path traversal in npm node-tar

Priority MEDIUM 43

The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.03286 Published 2021-08-31 Partial fix · 4.4.16, 5.0.8 +1 CWE-22
TI-2021-15587 CVE-2021-37712 · GHSA-qq89-hq3f-393p

Path traversal in npm node-tar

Priority MEDIUM 41

The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.01865 Published 2021-08-31 Partial fix · 4.4.18, 5.0.10 +1 CWE-22
Open these records in search →