---
title: "tar 7.5.22"
description: "Latest published version of tar is 7.5.22, licensed BlueOak-1.0.0. Current as of our last registry check."
url: https://inlinr.com/packages/tar
lang: en
---

[Packages](https://inlinr.com/packages)

# tar

7.5.22 · 24 Jul 2026 BlueOak-1.0.0 117.9M / week [Repository](https://github.com/isaacs/node-tar) [Homepage](https://github.com/isaacs/node-tar#readme) [npm](https://www.npmjs.com/package/tar) [Atom feed](https://inlinr.com/packages/feed/tar)

Your version 

## Where each line stands

[Plan an upgrade](https://inlinr.com/packages/tar/upgrade)

LineNewestSecurity

- 7.x 7.5.22 Safe from 7.5.21 Latest line
- 6.x and older 6.2.1 121 open advisories, worst critical  · last release Mar 2024, no longer updated [To 7.5.22](https://inlinr.com/packages/tar/upgrade/6.2.1-7.5.22)

## Latest releases

[All 154 releases](https://inlinr.com/packages/tar/releases)

1. ### [7.5.22](https://inlinr.com/packages/tar/releases/7.5.22 "Open this release")  
24 Jul 2026
2. ### [7.5.21](https://inlinr.com/packages/tar/releases/7.5.21 "Open this release")  
21 Jul 2026
3. ### [7.5.20](https://inlinr.com/packages/tar/releases/7.5.20 "Open this release")  
12 Jul 2026

Notes older than 90 days are read on the [Releases tab](https://inlinr.com/packages/tar/releases).

Dependency tracking · free for 3 projects

## Know when your own dependencies move

tar had 12 security advisories in the last 12 months. inlinr emails you the day one touches a project of yours, with the version that fixes it.

- Advisories reach you  
An email when a critical or high advisory affects a project, before the next install.
- Upgrades checked first  
Peer ranges, Node, ESM-only and types changes read before you bump.
- Only what matters  
Majors and breaking notes stay; patches and sibling bumps fold into one line.

[How dependency tracking works](https://inlinr.com/dependencies)

## Security

[All 21](https://inlinr.com/packages/tar/security)

- [node-tar: Decompression/parse DoS via unlimited input](https://inlinr.com/advisories/GHSA-23hp-3jrh-7fpw) Critical · fixed in 7.5.19
- [node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection](https://inlinr.com/advisories/GHSA-r292-9mhp-454m) High · fixed in 7.5.21
- [node-tar: Negative tar entry size causes infinite loop in archive replace](https://inlinr.com/advisories/GHSA-8x88-c5mf-7j5w) High · fixed in 7.5.18

## Health

[Details](https://inlinr.com/packages/tar/security#signals)

- **Provenance**:
- **Publisher**:
- **Maintainers**:
- **Scorecard**:
- **Size**:

## Weekly downloads

Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.