From 67414fd8a79ca9074ab23131313bced4dd328ed7 Mon Sep 17 00:00:00 2001 From: Ian Littman Date: Wed, 21 Jan 2026 11:25:36 -0600 Subject: [PATCH] Bump tar dep on fleetctl-npm to resolve CVE (#38578) --- tools/fleetctl-npm/package.json | 4 ++-- tools/fleetctl-npm/yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/tools/fleetctl-npm/package.json b/tools/fleetctl-npm/package.json index b7de63499e..75cfb71cfc 100644 --- a/tools/fleetctl-npm/package.json +++ b/tools/fleetctl-npm/package.json @@ -18,10 +18,10 @@ "dependencies": { "axios": "1.13.2", "rimraf": "6.1.2", - "tar": "7.5.3" + "tar": "7.5.4" }, "keywords": [ "osquery", "security" ] -} \ No newline at end of file +} diff --git a/tools/fleetctl-npm/yarn.lock b/tools/fleetctl-npm/yarn.lock index ba7c9c95a0..467360505f 100644 --- a/tools/fleetctl-npm/yarn.lock +++ b/tools/fleetctl-npm/yarn.lock @@ -241,10 +241,10 @@ rimraf@6.1.2: glob "^13.0.0" package-json-from-dist "^1.0.1" -tar@7.5.3: - version "7.5.3" - resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.3.tgz#e1a41236e32446f75e63b720222112c4ffe5b3a1" - integrity sha512-ENg5JUHUm2rDD7IvKNFGzyElLXNjachNLp6RaGf4+JOgxXHkqA+gq81ZAMCUmtMtqBsoU62lcp6S27g1LCYGGQ== +tar@7.5.4: + version "7.5.4" + resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.4.tgz#18b53b44f939a7e03ed874f1fafe17d29e306c81" + integrity sha512-AN04xbWGrSTDmVwlI4/GTlIIwMFk/XEv7uL8aa57zuvRy6s4hdBed+lVq2fAZ89XDa7Us3ANXcE3Tvqvja1kTA== dependencies: "@isaacs/fs-minipass" "^4.0.0" chownr "^3.0.0"