{"action":"Upgrade node-tar to 6.2.1 or later.","affected":[{"fixed":"6.2.1","introduced":"0"}],"component":"node-tar","cve_ids":["CVE-2024-28863"],"ecosystem":"npm","epss":0.00929,"exploited":false,"fixed_versions":["6.2.1"],"ghsa_id":"GHSA-f5x3-32g6-xq36","id":"tcs_01M5KFMKB0621RP8FBXHEYDVMW","modified_at":"2026-09-10T03:50:10.480254172Z","published_at":"2024-03-22T16:57:05Z","references":["https://osv.dev/vulnerability/GHSA-f5x3-32g6-xq36","https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36","https://nvd.nist.gov/vuln/detail/CVE-2024-28863","https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7","https://github.com/isaacs/node-tar","https://security.netapp.com/advisory/ntap-20240524-0005"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f5x3-32g6-xq36","url":"https://osv.dev/vulnerability/GHSA-f5x3-32g6-xq36"}],"summary":"Denial of service while parsing a tar file due to lack of folders count validation"}