Skip to content

Commit e6881c1

Browse files
antonisclaude
andauthored
chore(deps): bump tar to ^7.5.8 (#5703)
Updates existing tar resolution from ^7.5.7 to ^7.5.8, patching arbitrary file read/write via hardlink target escape through symlink chain during extraction (affected range: < 7.5.8). Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 3b28852 commit e6881c1

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@
8383
"tar-fs": "^3.1.1",
8484
"on-headers": "^1.1.0",
8585
"diff": "^5.2.2",
86-
"tar": "^7.5.7"
86+
"tar": "^7.5.8"
8787
},
8888
"version": "0.0.0",
8989
"name": "sentry-react-native",

yarn.lock

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32714,7 +32714,7 @@ __metadata:
3271432714
languageName: node
3271532715
linkType: hard
3271632716

32717-
"tar@npm:^7.5.7":
32717+
"tar@npm:^7.5.8":
3271832718
version: 7.5.9
3271932719
resolution: "tar@npm:7.5.9"
3272032720
dependencies:

0 commit comments

Comments
 (0)