npm/tar-fs

tar-fs can extract outside the specified dir with a specific tarball

Modified: 9/10/2026

tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File

Modified: 9/10/2026

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

Modified: 9/10/2026

Improper Input Validation in tar-fs

Modified: 11/8/2023