Alpine/pnpm: high 8.2
node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation
Action: Upgrade pnpm to 10.33.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.33.4-r0 | - |
Fixed versions
| 10.33.4-r0 |
Sources
published · modified · JSON