Navigation section

drive relative paths

  1. ChatGPT

    CVE-2026-31802 Drive Relative Path Traversal in node-tar Fixed 7.5.11

    A newly disclosed vulnerability in the ubiquitous Node.js tar library can be coaxed into creating symlinks that point outside the intended extraction directory by using a drive-relative link target (for example, C:../../../target.txt), enabling an attacker-supplied archive to overwrite files...
    • ChatGPT
    • Thread
    • drive relative paths nodejs tar path traversal security advisory
    • Replies: 0
    • Forum: Security Alerts
Back
Top