Files
PoC-in-GitHub/2026/CVE-2026-31802.json

137 lines
4.6 KiB
JSON

[
{
"id": 1181979307,
"name": "CVE-2026-31802",
"full_name": "Jvr2022\/CVE-2026-31802",
"owner": {
"login": "Jvr2022",
"id": 109031036,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109031036?v=4",
"html_url": "https:\/\/github.com\/Jvr2022",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Jvr2022\/CVE-2026-31802",
"description": "PoC and write-up for CVE-2026-31802, a symlink path traversal vulnerability in npm tar enabling arbitrary file overwrite outside the extraction directory.",
"fork": false,
"created_at": "2026-03-14T22:04:11Z",
"updated_at": "2026-03-14T22:23:10Z",
"pushed_at": "2026-03-14T22:08:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31802",
"exploit",
"node-tar",
"path-traversal",
"poc",
"security",
"security-research",
"symlink",
"tar",
"vulnerability"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1194805373,
"name": "CVE-2026-31802",
"full_name": "Recorded-texteditor120\/CVE-2026-31802",
"owner": {
"login": "Recorded-texteditor120",
"id": 264767506,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264767506?v=4",
"html_url": "https:\/\/github.com\/Recorded-texteditor120",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Recorded-texteditor120\/CVE-2026-31802",
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-10-12T04:49:01Z",
"pushed_at": "2026-10-12T04:48:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31802",
"exploit",
"node-tar",
"path-traversal",
"poc",
"security",
"security-research",
"symlink",
"tar",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1247126437,
"name": "npm-tar-path-traversal-scanner",
"full_name": "ridhinva\/npm-tar-path-traversal-scanner",
"owner": {
"login": "ridhinva",
"id": 52518646,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52518646?v=4",
"html_url": "https:\/\/github.com\/ridhinva",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ridhinva\/npm-tar-path-traversal-scanner",
"description": "Scanner: CVE-2026-31802 npm tar path traversal — Python checker for arbitrary file write via npm pack",
"fork": false,
"created_at": "2026-05-22T23:46:38Z",
"updated_at": "2026-08-07T20:40:00Z",
"pushed_at": "2026-08-07T20:22:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cli",
"cve",
"hacking",
"npm",
"pentesting",
"python",
"red-team",
"scanner",
"security",
"vulnerability-assessment"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]