Known vulnerabilities in node-tar

Vendor: isaacs
Software: node-tar
Software CPE: cpe:2.3:a:isaacs:node-tar:*:*:*:*:*:nodejs:*:*
Total vulnerabilities: 13
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting node-tar node-tar is affected by 13 known vulnerabilities: 2 high, 8 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135768 - Allocation of Resources Without Limits or Throttling
CVE-2026-59873
CWE-770 Medium
No
No
7.5.19 29.06.2026 SB2026062990
SB20260728122
SB2026072972
and 2 more
#VU135767 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59874
CWE-835 Medium
No
No
7.5.18 29.06.2026 SB2026062989
SB20260728122
SB2026072972
and 2 more
#VU135766 - Type conversion
CVE-2026-59871
CWE-704 Medium
No
No
7.5.18 29.06.2026 SB2026062989
#VU135506 - Uncaught Exception
CVE-2026-59875
CWE-248 Medium
No
No
7.5.17 26.06.2026 SB2026062678
#VU135505 - Interpretation Conflict
CVE-2026-53655
CWE-436 Low
No
No
7.5.16 26.06.2026 SB2026062676
SB2026072414
SB2026080659
#VU126872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-31802
CWE-22 Low
Available
No
7.5.11 22.04.2026 SB20260422243
SB20260428143
SB2026050670
and 2 more
#VU123630 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 High
No
No
7.5.11 09.03.2026 SB2026030916
#VU123629 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-29786
CWE-59 High
Available
No
7.5.10 09.03.2026 SB2026030915
SB2026050668
SB2026060237
and 2 more
#VU123172 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26960
CWE-22 Medium
No
No
7.5.8 24.02.2026 SB2026022432
SB20260428166
SB2026042935
and 1 more
#VU121671 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23950
CWE-362 Medium
Available
No
7.5.4 20.01.2026 SB2026012003
SB20260202129
SB2026020564
and 8 more
#VU121640 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23745
CWE-22 Medium
Available
No
7.5.3 19.01.2026 SB2026011930
SB20260202129
SB2026020564
and 10 more
#VU117882 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64118
CWE-362 Low
No
No
7.5.2 31.10.2025 SB20251031149
SB2025112742
SB2026031939
and 1 more
#VU71631 - Improper Link Resolution Before File Access ('Link Following')
CVE-2018-20834
CWE-59 Medium
No
No
2.2.2, 4.4.2 30.01.2023 SB2019043013
SB2023013027
SB2019072241