Tag

cve-2021-32803

Safeguard articles tagged "cve-2021-32803" — guides, analysis, and best practices for software supply chain and application security.

1 article

node-tar Arbitrary File Write via Symlink Extraction (CVE...

CVE-2021-32803 allows crafted symlinks in tar archives to make node-tar write files outside the extraction directory via malicious npm packages.