Skip to content
CI for 1.x

fix: prevent arbitrary file write via symlink extraction #310

Sign in to view logs

fix: prevent arbitrary file write via symlink extraction

fix: prevent arbitrary file write via symlink extraction #310

Re-run triggered January 28, 2026 02:20
@fengmk2fengmk2
#133
fix-GHSA-cc8f-xg8v-72m3-for-1.x
Status Success
Total duration 1m 29s
Artifacts –

nodejs.yml

on: pull_request
Node.js  /  Setup
6s
Node.js / Setup
Matrix: Node.js / Test
Fit to window
Zoom out
Zoom in

Annotations

16 warnings
Node.js / Test (windows-latest, 22): test/tar/security-GHSA-cc8f-xg8v-72m3.test.js#L26
Invalid JSDoc tag (preference). Replace "returns" JSDoc tag with "return"
Node.js / Test (windows-latest, 22): test/tar/security-GHSA-cc8f-xg8v-72m3.test.js#L25
Missing JSDoc @param "entries" description
Node.js / Test (windows-latest, 22): lib/utils.js#L170
Use 'fs.promises.symlink()' instead
Node.js / Test (windows-latest, 22): lib/utils.js#L12
Invalid JSDoc tag (preference). Replace "returns" JSDoc tag with "return"
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L71
Use 'fs.promises.readdir()' instead
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L61
Use 'fs.promises.stat()' instead
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L48
Use 'fs.promises.stat()' instead
Node.js / Test (windows-latest, 22): lib/tar/file_stream.js#L22
Use 'fs.promises.stat()' instead
Node.js / Test (windows-latest, 22): test/tar/security-GHSA-cc8f-xg8v-72m3.test.js#L26
Invalid JSDoc tag (preference). Replace "returns" JSDoc tag with "return"
Node.js / Test (windows-latest, 22): test/tar/security-GHSA-cc8f-xg8v-72m3.test.js#L25
Missing JSDoc @param "entries" description
Node.js / Test (windows-latest, 22): lib/utils.js#L170
Use 'fs.promises.symlink()' instead
Node.js / Test (windows-latest, 22): lib/utils.js#L12
Invalid JSDoc tag (preference). Replace "returns" JSDoc tag with "return"
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L71
Use 'fs.promises.readdir()' instead
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L61
Use 'fs.promises.stat()' instead
Node.js / Test (windows-latest, 22): lib/tar/stream.js#L48
Use 'fs.promises.stat()' instead
Node.js / Test (windows-latest, 22): lib/tar/file_stream.js#L22
Use 'fs.promises.stat()' instead