Search: CVE-2026-59874

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.4%	CVE-2026-59874isaacs node-tar · Infinite Loop High8.7EPSS 0.4%2026-07-08CVE Database V5CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18. EPSS 0.4%Vulnerability CWE-835	CVE Database V5	2026-07-08

Page 1 of 1 · 1 duplicate CVE record merged