Vulnerability Database

296,379

Total vulnerabilities in the database

CVE-2025-59343

Impact

v3.1.0, v2.1.3, v1.16.5 and below

Patches

Has been patched in 3.1.1, 2.1.4, and 1.16.6

Workarounds

You can use the ignore option to ignore non files/directories.

  ignore (_, header) {
    // pass files &amp; directories, ignore e.g. symlinks
    return header.type !== &#039;file&#039; &amp;&amp; header.type !== &#039;directory&#039;
  }

Credit

Reported by: Mapta / BugBunny_ai

Published: Sep 24, 2025
Updated: Sep 25, 2025
CVE: CVE-2025-59343
GHSA: GHSA-vj76-c3g6-qr5v
Severity: High
Exploit:

No technical information available.

CWEs:

OWASP TOP 10:

A5 - Broken Access Control

Affected Software
References

Software	From	Fixed in
tar-fs	3.0.0	3.1.1
tar-fs	2.0.0	2.1.3
tar-fs	-	1.16.5

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime