---
title: "14.5.4: Patch the tar-fs vulnerability (CVE-2024-12905)"
url: "https://www.cypress.io/releases/14-5-4"
description: "Cypress now ships tar-fs 2.1.3 and 3.1.0, resolving CVE-2024-12905 so your dependency audits stop flagging Cypress for it. Read the changelog"
---

# 14.5.4: Patch the tar-fs vulnerability (CVE-2024-12905)

ReleasedReleased on August 6, 2025

Cypress now ships tar-fs 2.1.3 and 3.1.0, resolving CVE-2024-12905 so your dependency audits stop flagging Cypress for it.

[Read the changelog](https://docs.cypress.io/app/references/changelog#14-5-4)