Security Advisory

CVE-2015-8860

7.5
HIGH

Vulnerability Description

The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Published Date January 23, 2017
Official Source NIST NVD Advisory