Threats tagged 'cleanstart-2026-yj33499'

CVE-2026-59873 is a medium severity vulnerability in the node-tar package affecting multiple specific versions prior to 7.5.19. The flaw involves insufficient enforcement of hard upper bounds on total decompressed data, entry counts, or decompression ratio during archive extraction. This can potentially lead to resource exhaustion or denial of service. The issue is fixed in renovate version 44.32.4-r1 and later. No known exploits have been reported in the wild.