[Snyk] Upgrade tar from 7.5.16 to 7.5.22

[Power-Maverick]

Snyk has created this PR to upgrade tar from 7.5.16 to 7.5.22.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Allocation of Resources Without Limits or Throttling SNYK-JS-TAR-17909152	300	Proof of Concept
	Infinite loop SNYK-JS-TAR-17909068	300	Proof of Concept
	Uncaught Exception SNYK-JS-TAR-17909225	300	Proof of Concept
	Incorrect Type Conversion or Cast SNYK-JS-TAR-17909104	300	Proof of Concept
	Uncontrolled Recursion SNYK-JS-TAR-18319500	300	Proof of Concept

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: tar

• 7.5.22 - 2026-07-24
  

  7.5.22

• 7.5.21 - 2026-07-21
  

  7.5.21

• 7.5.20 - 2026-07-12
  

  7.5.20

• 7.5.19 - 2026-06-27
  

  7.5.19

• 7.5.18 - 2026-06-27
  

  7.5.18

• 7.5.17 - 2026-06-25
  

  7.5.17

• 7.5.16 - 2026-06-01
  

  7.5.16

from tar GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Power-Maverick]

This is a patch version upgrade that includes several security fixes.

Highlights:

• The versions between 7.5.16 and 7.5.22 address multiple security vulnerabilities, including fixes for uncontrolled recursion and allocation of resources without limits, which could lead to a denial of service.
• No breaking API changes or mandatory code modifications are documented for this version range. The update primarily enhances security and stability when parsing tar archives.

Recommendation: This is a recommended security update with no expected breaking changes for typical usage.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
web	Ready	Preview	Sep 13, 2026 10:48am UTC