HIGH8.8CVE-2026-23950Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS from 0
HIGH8.2CVE-2026-24842node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3
from 0, < 4.4.4+ds1-2
HIGH7.5Symlink Arbitrary File Overwrite in tar
from 0, < 2.2.1-1
HIGH7.1Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3
MEDIUM6.5Denial of service while parsing a tar file due to lack of folders count validation
from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3
MEDIUM6.3tar has Hardlink Path Traversal via Drive-Relative Linkpath
from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3
MEDIUM6.1node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3
MEDIUM5.5node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
from 0
MEDIUM5.5node-tar Symlink Path Traversal via Drive-Relative Linkpath
from 0, < 6.0.5+ds1+~cs11.3.9-1+deb11u3