Mafintosh vulnerabilities
We track 2 vulnerabilities in Mafintosh products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2025.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest Mafintosh vulnerabilities
- 8.7 High severity
tar-fs: Improper Limitation of a Pathname to a Restricted Directory
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4,
- 8.7 High severity
tar-fs: Improper Limitation of a Pathname to a Restricted Directory
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workarou