GHSA lookup

GHSA-8QQ5-RM4J-MR97

Pruva has a verified reproduction for GHSA-8QQ5-RM4J-MR97: node-tar Arbitrary File Overwrite via Hardlink Escape. The canonical evidence record is REPRO-2026-00064.

REPRO

REPRO-2026-00064

Package

tar · npm

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents GitHub advisory