Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
pear/archive_tar
master @ dc32855
15
Fixes
4
CVEs
HIGH
Peak severity
Highlights
Path Traversal: 12 prior fixes. Scrutinize any change in this area.
Archive_Tar: most-fixed (9 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Attackers can exploit inadequate path canonicalization and symbolic link checking to write files outside of the target extraction directory. This is a recurring vulnerability class that has required multiple rounds of fixes to address relative symlinks, directory separator differences on Windows versus non-Windows platforms, and whitespace trimming bypasses.
Remote Code Execution: PHP object injection and remote code execution are possible if stream wrappers like 'phar://' are processed during archive operations. Earlier fixes only partially blocked the protocol, leaving gaps for case-sensitivity bypasses or other stream protocols.
Path Traversal: Exploiting stream wrappers (e.g., 'file://' or other '://' URI schemes) in archive paths allows attackers to write files to arbitrary locations or trigger unexpected local/remote stream operations.