tar: Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction (high). GHSA-83g3-92jg-28cx, CVE-2026-26960.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?