Skip to content

Conversation

jasonMcCullough
Copy link

No description provided.

Copy link

github-actions bot commented Sep 1, 2025

Thank you for submitting a Pull Request (PR) to the LLVM Project!

This PR will be automatically labeled and the relevant teams will be notified.

If you wish to, you can add reviewers by using the "Reviewers" section on this page.

If this is not working for you, it is probably because you do not have write permissions for the repository. In which case you can instead tag reviewers by name in a comment by using @ followed by their GitHub username.

If you have received no comments on your PR for a week, you can request a review by "ping"ing the PR by adding a comment “Ping”. The common courtesy "ping" rate is once a week. Please remember that you are asking for valuable time from other developers.

If you have further questions, they may be answered by the LLVM GitHub User Guide.

You can also ask questions in a comment on this PR, on the LLVM Discord or on the forums.

@jasonMcCullough jasonMcCullough changed the title Pipe 8792 security issue tar fs vulnerable to link following and path traversal via extracting a crafted tar file fix(deps): ran npm install to cleanup package-lock.json and remove unused tar-fs dependency Sep 1, 2025
@jasonMcCullough
Copy link
Author

raised in error

@jasonMcCullough jasonMcCullough deleted the PIPE-8792-security-issue-tar-fs-vulnerable-to-link-following-and-path-traversal-via-extracting-a-crafted-tar-file branch September 1, 2025 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants