Read the docs

unjs

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

unjs records in CISA KEV

No unjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Unhead 3 records HIGH Defu 1 record LOW Ipx 1 record HIGH Nanotar 1 record HIGH

Records

1 record in Nanotar · all components

TI-2025-42947 CVE-2025-69874 · GHSA-92fh-27vv-894w

nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip()…

Priority HIGH 81

nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00929 Published 2026-02-11 No fix listed CWE-22
Open these records in search →