Skip to content
Threat Feed
Subscribe

Tag

Node-Tar

1 brief RSS
low advisory

node-tar Denial-of-Service Vulnerability via Negative Tar Entry Size (CVE-2026-59874)

A denial-of-service vulnerability, identified as CVE-2026-59874, exists in the 'node-tar' library, allowing a negative tar entry size to trigger an infinite loop when an archive is being replaced, potentially leading to system unavailability.

node-tar denial-of-service vulnerability cve
1c