org.webjars.npm:tar vulnerabilities

Published: 9 years ago Last updated: 9 months ago Latest version: 7.4.3

License

ISC[2.2.1,);

BSD-2-Clause[0.1.20,2.2.1);

Known vulnerabilities in the org.webjars.npm:tar package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Directory Traversal	[0,)
M Directory Traversal	[0,)
M Improper Handling of Unicode Encoding	[0,)
M Uncontrolled Resource Consumption ('Resource Exhaustion')	[,6.2.1)
H Arbitrary File Write	[,6.1.11)
H Arbitrary File Write	[,6.1.11)
H Arbitrary File Write	[,6.1.11)
L Regular Expression Denial of Service (ReDoS)	[,6.1.11)
H Arbitrary File Overwrite	[,6.1.11)
H Arbitrary File Overwrite	[,6.1.11)
H Arbitrary File Overwrite	[,2.2.2)[3.0.0,4.4.2)
H Symlink File Overwrite	(0.0.1,2.0.0)

21 VERSIONS IN TOTAL See all versions