Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: npm node-tar — DSA-5008 Clear all filters
TI-2021-15587 CVE-2021-37712 · GHSA-qq89-hq3f-393p

Path traversal in npm node-tar

Priority MEDIUM 41

The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.01865 Published 2021-08-31 Partial fix · 4.4.18, 5.0.10 +1 CWE-22
TI-2021-15576 CVE-2021-37701 · GHSA-9r2w-394v-53qc

Path traversal in npm node-tar

Priority MEDIUM 43

The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.03286 Published 2021-08-31 Partial fix · 4.4.16, 5.0.8 +1 CWE-22