CVE-2026-24909
vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.
- Update to 1.0.0-rc.10
Published Updated
PatchFirst · Latest vulnerabilities
@vltpkg/tar vulnerabilities
Vulnerabilities published for @vltpkg/tar in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Check your server
Check your installed stack and versions against the current vulnerability feeds.