Tag

cve-2021-37712

Safeguard articles tagged "cve-2021-37712" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

node-tar Windows-Specific Path Traversal Bypass (CVE-2021...

CVE-2021-37712 let malicious tar archives bypass node-tar's symlink protections on Windows via junctions, enabling path traversal during npm installs. Here's what to patch.

Dec 2, 20258 min read