Количество 35
Количество 35
CVE-2026-59874
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.
CVE-2026-59874
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.
CVE-2026-59874
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.
CVE-2026-59874
node-tar: Negative tar entry size causes infinite loop in archive replace
CVE-2026-59874
node-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
CVE-2026-59873
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.
CVE-2026-59873
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.
CVE-2026-59873
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.
CVE-2026-59873
node-tar: Decompression/parse DoS via unlimited input
CVE-2026-59873
node-tar is a tar archive manipulation library for Node.js. Prior to 7 ...
GHSA-8x88-c5mf-7j5w
node-tar: Negative tar entry size causes infinite loop in archive replace
GHSA-23hp-3jrh-7fpw
node-tar: Decompression/parse DoS via unlimited input
BDU:2026-09563
Уязвимость файла src/extract.ts библиотеки node-tar программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-09562
Уязвимость функции tar.replace() библиотеки node-tar программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21448-1
Security update for agama-web-ui
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18. | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-59874 node-tar: Negative tar entry size causes infinite loop in archive replace | 0% Низкий | 2 месяца назад | |
| CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7 ... | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-59873 node-tar: Decompression/parse DoS via unlimited input | 1% Низкий | 2 месяца назад | |
| CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7 ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-8x88-c5mf-7j5w node-tar: Negative tar entry size causes infinite loop in archive replace | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| GHSA-23hp-3jrh-7fpw node-tar: Decompression/parse DoS via unlimited input | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
 | BDU:2026-09563 Уязвимость файла src/extract.ts библиотеки node-tar программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.6 | 1% Низкий | 3 месяца назад |
| BDU:2026-09562 Уязвимость функции tar.replace() библиотеки node-tar программной платформы Node.js, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21448-1 Security update for agama-web-ui | около 2 месяцев назад |
Уязвимостей на страницу