Safeguard
Tag

tar-extraction

Safeguard articles tagged "tar-extraction" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

node-tar Second Bypass Enabling Arbitrary File Write (CVE...

CVE-2021-32804 let crafted tar archives bypass node-tar path sanitization, enabling arbitrary file writes during npm package extraction.

Dec 2, 20257 min read
tar-extraction — Safeguard Blog