New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update tar version #453

Open

ERCubed opened this issue May 6, 2019 · 2 comments

ERCubed commented May 6, 2019

Tar dependancy version needs to be updated to 4.8.8 to satisfy NIST vulnerability CVE-2018-20834
https://nvd.nist.gov/vuln/detail/CVE-2018-20834

Contributor

sneakypete81 commented May 8, 2019

#454. Tar v4.4.2 fixes this vulnerability.

amureki commented May 27, 2019

Greetings, fellows!

@sneakypete81 thank you for the patch!
@nicolasnoble do you have any plans to release in NPM?

Thanks!
Best,
Rustem

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment