—
DRUPAL-CORE-2021-001
Quick fix
DRUPAL-CORE-2021-001 — drupal/core: upgrade to the fixed version with the command below.
composer require drupal/core:^8.9.13Details
The Drupal project uses the pear Archive\_Tar library, which has released a security update that impacts Drupal. For more information please see:
* [CVE-2020-36193](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36193)
Exploits may be possible if Drupal is configured to allow `.tar`, `.tar.gz`, `.bz2`, or `.tlz` file uploads and processes them.
Are you affected?
Enter the version of the package you're using.