tar-fs vulnerabilities
2 known vulnerabilities in tar-fs from Mafintosh. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
tar-fs: Improper Limitation of a Pathname to a Restricted Directory
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4,
- 8.7 High severity
tar-fs: Improper Limitation of a Pathname to a Restricted Directory
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workarou