GCVE-110-MAGEIA-2022-103

Advisory Published

Vulnetix · Advisory published March 21, 2022

Untrusted tar file to symlink into an arbitrary location allowing file overwrites. (CVE-2021-37712) Arbitrary file creation/overwrite and arbitrary code execution. (CVE-2021-37701) Arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. (CVE-2021-32803) Arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization (CVE-2021-32804)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	nodejs-tar	0 (affected), 6.0.5-1.1.mga8 (unaffected)	—

References

Updated nodejs-tar packages fix security vulnerability

advisory

Updated nodejs-tar packages fix security vulnerability

issue

Updated nodejs-tar packages fix security vulnerability

url

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON