CVE-2025-69874Critique · CVSS 9.8EPSS 0,94%Aucun correctif publiéCVE-2025-69874nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence.nanotarNode.jsPublication 11 février 2026Mise à jour 12 février 2026Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗