
🚨 Node.js security alert (CVE-2026-24842)
node-tar vulnerability allows malicious TAR files to access files outside extraction directories.
👉 Possible via npm install
👉 Risk of credential / SSH key leaks
👉 Upgrade to node-tar 7.5.7+
#Security #NodeJS #SupplyChainAttack
English
