mafintosh/tar-fs Security Advisories | GitStock

high2025-09-24

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

GHSA-vj76-c3g6-qr5v · CVE-2025-59343

high2025-06-03

tar-fs can extract outside the specified dir with a specific tarball

GHSA-8cj5-5rvv-wf4v · CVE-2025-48387

high2025-03-27

tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File

GHSA-pq67-2wwv-3xjx · CVE-2024-12905