Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2024-28863 node-tar is a Tar for Node.js

Description

node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within few seconds of running it using a path with too many sub-folders inside. Version 6.2.1 fixes this issue by preventing extraction in excessively deep sub-folders.

Produits et versions touchés

Produit Versions touchées Corrigé en
node-tar 6.2 premières → < 6.2.1 6.2.1
node-tar 6.2 premières → < 6.2.1 6.2.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de node-tar

Les 14 CVE de node-tar →
CVE-2026-73566 node-tar is a tar archive manipulation library for Node.js 7.5 Élevée CVE-2026-59871 node-tar is a tar archive manipulation library for Node.js 5.3 Moyenne CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js 8.7 Élevée CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js 9.2 Critique
Suivre cette CVE