StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · node-tar

`node-tar` CVE matrix across Linux distros

25 CVEs tracked across 3 distro releases. Showing the 25 most-recent fix records.

Ecosystems with tracked fixes

Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2015-8860→ fixed in2.2.1-1
CVE-2018-20834→ fixed in4.4.4+ds1-2
CVE-2021-32803→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u1
CVE-2021-32804→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u1
CVE-2021-37701→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u2
CVE-2021-37712→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u2
CVE-2024-28863→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u3
CVE-2026-23745→ fixed in6.0.5+ds1+~cs11.3.9-1+deb11u3
+4 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-tar

Debian bookworm

Source: Debian

CVE-2015-8860→ fixed in2.2.1-1
CVE-2018-20834→ fixed in4.4.4+ds1-2
CVE-2021-32803→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-32804→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-37701→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-37712→ fixed in6.1.11+~cs11.3.10-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-tar

Debian trixie

Source: Debian

CVE-2015-8860→ fixed in2.2.1-1
CVE-2018-20834→ fixed in4.4.4+ds1-2
CVE-2021-32803→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-32804→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-37701→ fixed in6.1.7+~cs11.3.10-1
CVE-2021-37712→ fixed in6.1.11+~cs11.3.10-1
CVE-2024-28863→ fixed in6.1.13+~cs7.0.5-2

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-tar

Is YOUR node-tar patched?

5-second check on your actual server. The quickscan reads your installed node-tar version and matches against the same 25-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)