GHSA lookup

GHSA-8QQ5-RM4J-MR97

Pruva has a verified reproduction for GHSA-8QQ5-RM4J-MR97: node-tar Arbitrary File Overwrite via Hardlink Escape. The canonical evidence record is REPRO-2026-00065.

REPRO

REPRO-2026-00065

Package

tar · npm

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents GitHub advisory