org.webjars.npm:tar@6.2.0 vulnerabilities
-
latest version
6.2.0
-
first published
8 years ago
-
latest version published
6 months ago
-
licenses detected
- [2.2.1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.npm:tar package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
org.webjars.npm:tar is a full-featured Tar for Node.js. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption ('Resource Exhaustion') due to the lack of folders count validation during the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running the software and even crash the client within few seconds of running it using a path with too many sub-folders inside. How to fix Uncontrolled Resource Consumption ('Resource Exhaustion')? A fix was pushed into the |
[0,)
|