{"id":"ROOT-APP-NPM-GHSA-qffp-2rhf-9h96","summary":"GHSA-qffp-2rhf-9h96 in @rootio/tar - Patched by Root","details":"Root has patched GHSA-qffp-2rhf-9h96 in the @rootio/tar package for Root:npm. Multiple fixed versions available.","modified":"2026-03-06T20:00:05.283819Z","published":"2026-03-06T12:39:09Z","upstream":["GHSA-qffp-2rhf-9h96"],"database_specific":{"distro":"npm","source":"Root","distro_version":""},"affected":[{"package":{"name":"@rootio/tar","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-root.io.5"}]}],"database_specific":{"source":"https://api.root.io/external/osv/ROOT-APP-NPM-GHSA-qffp-2rhf-9h96.json","total_fixed_versions":1,"upstream_version":"6.2.1-root.io.5","all_fixed_versions":["6.2.1-root.io.5"],"root_patch_version":"","root_patched":true}}],"schema_version":"1.7.3"}