[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYrMz3m7qWG4XNwPwZwg6pSPj8GpWlLILy9d_vH12sXY":3,"g5a-family:php\u002Farchive_tar":130,"g5a-ex:php\u002Farchive_tar@*":131},{"success":4,"data":5},true,{"product":6,"versions":55,"topVulnerabilitiesByEpss":75,"kevVulnerabilities":99,"seoMetadata":108,"meta":127},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":54},"php","archive_tar",19,4,2,"2021-07-30",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.11",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.12",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.13",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.14",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.15",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.16",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.10",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.11",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.12",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.3",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.4",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.5",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.6",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.7",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.8",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.9","Archive Tar by Php is a technology product with 19 tracked versions and 4 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},[76,84,89,95],{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":4,"epssScore":83},"CVE-2020-28949","Archive_Tar through 1.4.10 has :\u002F\u002F filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:\u002F\u002F to overwrite files) can still succeed.","2020-11-19",7.8,"v3.1","High",0.84554,{"cveId":85,"description":86,"publishedDate":12,"cvssScore":87,"cvssVersion":81,"severity":82,"isKev":17,"epssScore":88},"CVE-2021-32610","In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.",7.1,0.73377,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":81,"severity":82,"isKev":4,"epssScore":94},"CVE-2020-36193","Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.","2021-01-18",7.5,0.70595,{"cveId":96,"description":97,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":17,"epssScore":98},"CVE-2020-28948","Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.",0.47493,[100,105],{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"severity":82,"isKev":4,"epssScore":83,"cisaVulnName":101,"cisaDateAdded":102,"cisaShortDescription":103,"cisaRequiredAction":104},"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","2022-08-25","PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.","Apply updates per vendor instructions.",{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"severity":82,"isKev":4,"epssScore":94,"cisaVulnName":106,"cisaDateAdded":102,"cisaShortDescription":107,"cisaRequiredAction":104},"PEAR Archive_Tar Improper Link Resolution Vulnerability","PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.",{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Archive Tar by Php - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Archive Tar by Php covering 19 versions with 4 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Archive Tar vulnerabilities, Archive Tar security, Archive Tar CVE, Php Archive Tar, Archive Tar threat intelligence, Php security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Archive Tar KEV, Archive Tar exploited vulnerabilities",{"@context":113,"@type":114,"name":115,"description":110,"url":116,"manufacturer":117,"applicationCategory":121,"softwareVersion":122,"mainEntity":123},"https:\u002F\u002Fschema.org","SoftwareApplication","Archive Tar","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fphp\u002Farchive_tar",{"@type":118,"name":119,"url":120},"Organization","Php","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fphp","Security Software","19 versions tracked",{"@type":124,"name":125,"description":126,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Archive Tar Security Vulnerabilities","Security vulnerabilities affecting Archive Tar by Php",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":128,"apiVersion":129},"2026-10-19T18:52:18.823Z","3.0",[],{"rows":132,"total":11,"capped":17,"failed":16},[133,138],{"cveId":77,"name":101,"severity":82,"cvss":80,"added":102,"epss":83,"published":134,"ranges":135,"checked":4,"hits":137,"covers":17},"2020-11-19T19:15:11.937",[136],"before 1.4.12",[],{"cveId":90,"name":106,"severity":82,"cvss":93,"added":102,"epss":94,"published":139,"ranges":140,"checked":4,"hits":142,"covers":17},"2021-01-18T20:15:12.667",[141],"up to 1.4.11",[]]