tar
7.5.22 · 24 Jul 2026BlueOak-1.0.0117.9M / weekRepositoryHomepagenpmAtom feed
Your version
7.5.19
27 Jun 20267.5.22 is the newest release of 7.x.
Security
Fixes 1 advisory that affected 7.5.18
- Criticalnode-tar: Decompression/parse DoS via unlimited inputGHSA-23hp-3jrh-7fpw · 20 Jul 2026Fixed in 7.5.19
1 advisory affects 7.5.19; 7.5.21 fixes them
- Highnode-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selectionGHSA-r292-9mhp-454m · 24 Jul 2026Fixed in 7.5.21
Release note
No note was found for 7.5.19 on GitHub or in the repository's changelog.