Skip to content

PatchFirst · Latest vulnerabilities

nanotar vulnerabilities

Vulnerabilities published for nanotar in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2025-69874
Critical · CVSS 9.8EPSS 0.94%No fix published
CVE-2025-69874
nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence.
nanotar Node.js
Published February 11, 2026Updated February 12, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →