A race condition vulnerability in node-tar version 7.5.1 allows uninitialized memory contents to be exposed when using the synchronous list method (.t or .list) if the tar file is truncated on disk during reading. This can lead to leakage of sensitive process memory data. The issue is fixed in version 7.5.2.