| Package | Affected versions | Patched versions |
|---|---|---|
| tar-fs | ≥ 2.0.0, < 2.1.4≥ 3.0.0, < 3.1.1< 1.16.6 | 2.1.43.1.11.16.6 |
v3.1.0, v2.1.3, v1.16.5 and below
Has been patched in 3.1.1, 2.1.4, and 1.16.6
You can use the ignore option to ignore non files/directories.
ignore (_, header) {
// pass files & directories, ignore e.g. symlinks
return header.type !== 'file' && header.type !== 'directory'
}
Reported by: Mapta / BugBunny_ai
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free