Vendors / Tar Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Tar Project records in CISA KEV No Tar Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 51
The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization.
CVSS 3.1 HIGH 8.2· Local · No auth · User interaction · EPSS 0.15067 · Published 2021-08-03 · Partial fix · 3.2.2, 4.4.14 +2 CWE-22
Priority MEDIUM 46
The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection.
CVSS 3.1 HIGH 8.2· Local · No auth · User interaction · EPSS 0.07795 · Published 2021-08-03 · Partial fix · 3.2.3, 4.4.15 +2 CWE-22
Priority LOW 36
An issue was discovered in the tar crate before 0.4.36 for Rust.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01392 · Published 2021-08-10 · Fixed in 0.4.36 CWE-59
Priority LOW 36
An issue was discovered in the tar crate before 0.4.16 for Rust.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01676 · Published 2019-08-26 · Fixed in 0.4.16 CWE-59
Priority LOW 23
tar-rs is a tar archive reading/writing library for Rust.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00394 · Published 2026-03-20 · Partial fix · 0.4.45 CWE-61
Open these records in search → All records by CVSS severity
0 4 1 0 0
