Skip to content

Commit 57a5f0a

Browse files
antonisclaude
andcommitted
chore(deps): bump tar to ^7.5.8
Updates existing tar resolution from ^7.5.7 to ^7.5.8, patching arbitrary file read/write via hardlink target escape through symlink chain during extraction (affected range: < 7.5.8, resolves to 7.5.9). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent cb7404a commit 57a5f0a

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@
6262
"appium-chromedriver@npm:5.6.73/@xmldom/xmldom": "0.8.10",
6363
"form-data": "4.0.4",
6464
"tar-fs": "^3.1.1",
65-
"tar": "^7.5.7"
65+
"tar": "^7.5.8"
6666
},
6767
"version": "0.0.0",
6868
"name": "sentry-react-native",

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32800,16 +32800,16 @@ __metadata:
3280032800
languageName: node
3280132801
linkType: hard
3280232802

32803-
"tar@npm:^7.5.7":
32804-
version: 7.5.7
32805-
resolution: "tar@npm:7.5.7"
32803+
"tar@npm:^7.5.8":
32804+
version: 7.5.9
32805+
resolution: "tar@npm:7.5.9"
3280632806
dependencies:
3280732807
"@isaacs/fs-minipass": ^4.0.0
3280832808
chownr: ^3.0.0
3280932809
minipass: ^7.1.2
3281032810
minizlib: ^3.1.0
3281132811
yallist: ^5.0.0
32812-
checksum: 82fa04804b6cae4c0b46b84e97a08c39e1c17bb959350baa32d139bcf5e1fc7ebc3ceb72465dd3e2e311992386ecc13599a257d5672158490ceb9464146d5573
32812+
checksum: 26fbbdf536895814167d03e4883f80febb6520729169c54d0f29ee8a163557283862752493f0e5b60800a6f3608aac3250c41fac8e20a4f056ba4fa63f3dbad7
3281332813
languageName: node
3281432814
linkType: hard
3281532815

0 commit comments

Comments
 (0)