CVE-2015-8860
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
- Update to 2.0.0
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for tar in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 21
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Check your installed stack and versions against the current vulnerability feeds.