Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-23745 PoC — node-tar 路径遍历漏洞

Source
https://github.com/Jvr2022/CVE-2026-23745
Associated Vulnerability
Title:node-tar 路径遍历漏洞 (CVE-2026-23745)
Description:node-tar是isaacs个人开发者的一款用于文件压缩/解压缩的软件包。 node-tar 7.5.2及之前版本存在路径遍历漏洞，该漏洞源于未清理链接路径，可能导致任意文件覆盖和符号链接投毒。
Description
Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.