Published: 30/04/2019 Updated: 04/09/2019

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 571

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P

A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2).

Vulnerable Product	Search on Vulmon	Subscribe to Product
node-tar project node-tar

Synopsis Important: rh-nodejs8-nodejs security update Type/Severity Security Advisory: Important Topic An update for rh-nodejs8-nodejs is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...

A VS Code extension that provides a command to browse the current project using GitExtensions, from the Explorer.

Git Extensions for VS Code This extension provides a command to browse the current project using GitExtensions, from the Explorer and the Editor It also support Workspaces Features Explorer From the Explorer, when you right-click (anywhere; a file or not) and then select the Browse with Git Extensions, Git Extensions will open in Browse mode for your current project

Convert your reStructuredText into HTML using rst2html in Visual Studio Code

reStructuredText 2 HTML Convert your reStructuredText into HTML using rst2html in Visual Studio Code Installation Clone repo into your VS Code extension directory How to Use Open the command pallette ctrl+shift+p Open a rst file Type convert rst 2 html Press ENTER Requirements Visual Studio Extension Settings None Known Issues Can only parse very basic rST files

Generate docstring for functions and classes

PyDoc This is a simple VSCode extension which helps in adding Docstrings to your python code Currently docstrings for Functions and Classes are supported Features Add elaborated Docstrings to your python code! Currently Supports docstrings for: Functions - with/without arguments and keyword arguments Class Extension Settings After you have installed the extension: Select

PyDoc README This is a simple VSCode extension which helps in adding Docstrings to your python code Currently docstrings for Functions and Classes are supported Features Add elaborated Docstrings to your python code! Currently Supports docstrings for: Functions - with/without arguments and keyword arguments Class Extension Settings After you have installed the extension: S

CWE-59 https://hackerone.com/reports/344595 https://github.com/npm/node-tar/compare/58a8d43...a5f7779 https://github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8 https://access.redhat.com/errata/RHSA-2019:1821 https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d https://nvd.nist.gov/vuln/detail/CVE-2018-20834 https://github.com/npm/node-tar/commits/v2.2.2 https://access.redhat.com/errata/RHSA-2019:1821 https://nvd.nist.gov https://github.com/ForEvolve/git-extensions-for-vs-code

CVE-2018-20834

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect