CVE-2021-32803
Named by 2 kept items in this workspace.
Search every workspace for CVE-2021-32803. It matches the name as written, so it can find other things that share it.
The items that name it 2
Vulnerability in the tar npm package where extracting a symlink allows writing outside the target directory; cited as a textbook example of the symlink-in-archive pattern.
Cited as historical example of symlink exploitation in package managers
All cves in this workspace.