Cloudanix VulnDB

GHSA-83g3-92jg-28cx

High · 7.1

CVSS

7.1

EPSS

—

Published

Feb 18, 2026

CISA due date

—

The record

Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction

Affected packages

Ecosystem Package Introduced Fixed
npm tar 0 7.5.8
Chainguard actions-runner 0 2.332.0-r0
Chainguard code-server 0 4.106.3-r5
Chainguard graalvm-25-ce-nodejs 0 25.0.2-r2
Chainguard kibana-8.17 0 8.17.10-r10
Chainguard kibana-8.17-iamguarded 0 8.17.10-r10
Chainguard kibana-8.19 0 8.19.11-r1
Chainguard kibana-8.19-bitnami 0 8.19.11-r1
Chainguard kibana-8.19-iamguarded 0 8.19.11-r1
Chainguard kibana-9.0 0 9.0.8-r10
Chainguard kibana-9.0-bitnami 0 9.0.8-r10
Chainguard kibana-9.0-iamguarded 0 9.0.8-r10
Chainguard kibana-9.1 0 9.1.10-r5
Chainguard kibana-9.1-iamguarded 0 9.1.10-r5
Chainguard kubeflow-pipelines-frontend 0 2.15.0-r12
Chainguard lerna 0 9.0.4-r3
Chainguard node-gyp 0 12.2.0-r2
Chainguard npm 0 11.10.1-r0
Chainguard opensearch-dashboards-2 0 2.19.4-r15
Chainguard opensearch-dashboards-2-fips 0 2.19.5-r0
Chainguard opensearch-dashboards-3 0 3.5.0-r5
Chainguard opensearch-dashboards-3-fips 0 3.5.0-r3
Chainguard prism 0 5.14.3-r7
Chainguard pulumi-language-nodejs 0 3.223.0-r1
Chainguard renovate 0 43.38.0-r1
Chainguard sqlpad 0 7.5.7-r10
Chainguard tileserver-gl 0 5.5.0-r5
Chainguard tileserver-gl-fips 0 5.5.0-r6
Chainguard vitess-22 0 22.0.3-r2
Chainguard vitess-23 0 23.0.2-r1
Wolfi code-server 0 4.106.3-r5
Wolfi kubeflow-pipelines-frontend 0 2.15.0-r12
Wolfi lerna 0 9.0.4-r3
Wolfi node-gyp 0 12.2.0-r2
Wolfi npm 0 11.10.1-r0
Wolfi opensearch-dashboards-2 0 2.19.4-r15
Wolfi opensearch-dashboards-3 0 3.5.0-r5
Wolfi prism 0 5.14.3-r7
Wolfi pulumi-language-nodejs 0 3.223.0-r1
Wolfi renovate 0 43.38.0-r1
Wolfi sqlpad 0 7.5.7-r10
Wolfi tileserver-gl 0 5.5.0-r5
Wolfi vitess-22 0 22.0.3-r2
Wolfi vitess-23 0 23.0.2-r1

Related vulnerabilities