Node.js tar: PAX Path Type Confusion Denial of Service (CVE-2025-59071)

github.com 2026-07-09查看中文 →

Security AdvisoryCVE-2025-59071Lowisaacs/node-tar

Affected:

node-tar <= 7.5.17

Fixed in:

7.5.18

Referenced CVEs: CVE-2026-59871 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Pre-Auth SQLi in Hospital Management System V1.0: delid Parameter POC 2026-07-13 Prototype Pollution in PrimeReact ObjectUtils.mutateFieldData 2026-07-13 Unsafe checkpoint deserialization RCE in NeRF via torch.load 2026-07-13 Self-RAG Unsafe Pickle Deserialization RCE Vulnerability Analysis 2026-07-13 Wuzhicms v4.1.0 Pre-Auth File Upload & SQLi Vulnerability Analysis and Patch Guide 2026-07-13

Offline Archive

Offline screenshot & PDF are Pro-exclusive