{"action":"Upgrade tar to 2.2.2 or later.","affected":[{"fixed":"4.4.2","introduced":"3.0.0"},{"fixed":"2.2.2","introduced":"0"}],"component":"tar","cve_ids":["CVE-2018-20834"],"ecosystem":"npm","epss":0.03145,"exploited":false,"fixed_versions":["4.4.2","2.2.2"],"ghsa_id":"GHSA-j44m-qm6p-hp7m","id":"tcs_01M5KFWTES1BGAEK46XW1YQQ4C","modified_at":"2023-11-29T22:25:48Z","published_at":"2019-05-01T18:37:31Z","references":["https://osv.dev/vulnerability/GHSA-j44m-qm6p-hp7m","https://nvd.nist.gov/vuln/detail/CVE-2018-20834","https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d","https://github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8","https://hackerone.com/reports/344595","https://access.redhat.com/errata/RHSA-2019:1821","https://github.com/isaacs/node-tar","https://github.com/npm/node-tar/commits/v2.2.2","https://github.com/npm/node-tar/compare/58a8d43...a5f7779"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j44m-qm6p-hp7m","url":"https://osv.dev/vulnerability/GHSA-j44m-qm6p-hp7m"}],"summary":"Arbitrary File Overwrite in tar"}