CyberRota Analysis
AI-GeneratedThe node-tar library for Node.js versions prior to 7.5.18 is vulnerable due to improper handling of all-digit PAX path and linkpath values, which can lead to uncaught TypeErrors during path normalization on Windows and Java environments. This vulnerability could disrupt applications relying on node-tar for archive manipulation, potentially affecting software stability and functionality. Developers and system administrators using affected versions should prioritize upgrading to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18.
Related CVEs
Other vulnerabilities affecting the same vendor(s)