Skip to content

fix: bumped tar from 7.5.1 to 7.5.2 - #2110

Merged
kirrg001 merged 1 commit into
mainfrom
build-tar-bump
Oct 31, 2025
Merged

kirrg001 merged 1 commit into
mainfrom
build-tar-bump

Conversation

@aryamohanan

Copy link
Copy Markdown
Contributor

Severity: moderate
@instana/shared-metrics: node-tar has a race condition leading to uninitialized memory exposure - GHSA-29xp-372q-xqph
@instana/shared-metrics: fix available via npm audit fix
@instana/shared-metrics: packages/shared-metrics/node_modules/tar

GHSA-29xp-372q-xqph

ref isaacs/node-tar#445

@aryamohanan
aryamohanan requested a review from a team as a code owner October 31, 2025 04:25
@sonarqubecloud

Copy link
Copy Markdown

@kirrg001
kirrg001 merged commit acfa855 into main Oct 31, 2025
3 checks passed
@instanacd
instanacd deleted the build-tar-bump branch January 5, 2026 00:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants