Логотип exploitDog
bind:CVE-2025-64118
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-64118

Количество 4

Количество 4

ubuntu логотип

CVE-2025-64118

3 месяца назад

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

EPSS: Низкий
nvd логотип

CVE-2025-64118

3 месяца назад

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

EPSS: Низкий
debian логотип

CVE-2025-64118

3 месяца назад

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { s ...

EPSS: Низкий
github логотип

GHSA-29xp-372q-xqph

3 месяца назад

node-tar has a race condition leading to uninitialized memory exposure

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-64118

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-64118

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

0%
Низкий
3 месяца назад
debian логотип
CVE-2025-64118

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { s ...

0%
Низкий
3 месяца назад
github логотип
GHSA-29xp-372q-xqph

node-tar has a race condition leading to uninitialized memory exposure

0%
Низкий
3 месяца назад

Уязвимостей на страницу