tar-fs
npmlatest 3.1.3 · 2026-06-27www.npmjs.com · all 77 versions
Security advisories3
- tar-fs: tar-fs can extract outside the specified dir with a specific tarballfixed in 1.16.5, 2.1.3, 3.0.9
- tar-fs: tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar Filefixed in 1.16.4, 2.1.2, 3.0.7
- tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarballfixed in 3.1.1, 2.1.4, 1.16.6
Versions that change something
- 1.16.42025-01fixes 1 advisory
- 1.16.52025-05fixes 1 advisory
- 1.16.62025-09fixes 1 advisory
- 2.1.22025-01fixes 1 advisory