CVE-2026-24842 node-tar: Vulnerable to Arbitrary File Creation/Overwrite

via Hardlink Path Traversal

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>

Author: sbouchet

code/package-lock.json

@@ -253,7 +253,8 @@
     },
     "@azure/core-http": {
       "form-data": "4.0.4"
-    }
+    },
+    "tar": "^7.5.7"
   },
   "repository": {
     "type": "git",