VYPR

deb package

ubuntu/node-tar

pkg:deb/ubuntu/node-tar

Vulnerabilities (1)

  • CVE-2021-37713Aug 31, 2021
    affected >= 0

    The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not e