node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split(/) to throw an uncaught TypeError. This issue is fixed in version 7.5.18.
Weakness
The product does not correctly convert an object, resource, or structure from one type to a different type.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tar | Isaacs | * | 7.5.18 (excluding) |
| Node-tar | Ubuntu | questing | * |