Skip to content

[GHSA-vj76-c3g6-qr5v] tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball#6581

Open
kristentr wants to merge 1 commit intokristentr/advisory-improvement-6581from
kristentr-GHSA-vj76-c3g6-qr5v
Open

[GHSA-vj76-c3g6-qr5v] tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball#6581
kristentr wants to merge 1 commit intokristentr/advisory-improvement-6581from
kristentr-GHSA-vj76-c3g6-qr5v

Commits

Commits on Dec 27, 2025