A vulnerability in tar-fs allows a symlink validation bypass when the destination directory is predictable and a specific tarball is used. This affects versions 3.1.0, 2.1.3, 1.16.5 and earlier. The issue has been patched in versions 3.1.1, 2.1.4, and 1.16.6. A workaround is available by configuring the ignore option to exclude symlinks and other non-file/directory types.