Information on source package node-tar

Available versions

ReleaseVersion
bullseye6.0.5+ds1+~cs11.3.9-1+deb11u2
bullseye (security)6.0.5+ds1+~cs11.3.9-1+deb11u3
bookworm6.1.13+~cs7.0.5-1
bookworm (security)6.1.13+~cs7.0.5-1+deb12u1
trixie6.2.1+~cs7.0.8-1+deb13u1
forky7.5.22+~4.0.1-1
sid7.5.22+~4.0.1-1

Open issues

BugbullseyebookwormtrixieforkysidDescription
CVE-2026-73566vulnerablevulnerablevulnerablefixedfixednode-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-59875vulnerable (no DSA, postponed)vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixednode-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-59874vulnerable (no DSA, postponed)vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixednode-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-59873vulnerable (no DSA, postponed)vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixednode-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-59871vulnerable (no DSA, postponed)vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixednode-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-53655vulnerable (no DSA, postponed)vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixednode-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ...

Open unimportant issues

BugbullseyebookwormtrixieforkysidDescription
CVE-2026-23950vulnerablevulnerablefixedfixedfixednode-tar,a Tar for Node.js, has a race condition vulnerability in vers ...

Resolved issues

BugDescription
CVE-2026-31802node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, ...
CVE-2026-29786node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, ...
CVE-2026-26960node-tar is a full-featured Tar for Node.js. When using default option ...
CVE-2026-24842node-tar,a Tar for Node.js, contains a vulnerability in versions prior ...
CVE-2026-23745node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails t ...
CVE-2025-64118node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { s ...
CVE-2024-28863node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no ...
CVE-2021-37713The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, a ...
CVE-2021-37712The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, a ...
CVE-2021-37701The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, an ...
CVE-2021-32804The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4 ...
CVE-2021-32803The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4 ...
CVE-2018-20834A vulnerability was found in node-tar before version 4.4.2 (excluding ...
CVE-2015-8860The tar package before 2.0.0 for Node.js allows remote attackers to wr ...

Security announcements

DSA / DLADescription
DLA-4712-1node-tar - security update
DLA-4552-1node-tar - security update
DLA-3237-1node-tar - security update
DSA-5008-1node-tar - security update

Search for package or bug name: Reporting problems