Search: CVE-2026-59873

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.6%	CVE-2026-59873isaacs node-tar · Unthrottled Resource Allocation Critical9.2EPSS 0.6%2026-07-08CVE Database V5CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19. EPSS 0.6%Vulnerability isaacs #cwe-770	CVE Database V5	2026-07-08

Page 1 of 1 · 1 duplicate CVE record merged