Iisaacs

Products

Exploited and recent CVEs

• CVE-2026-118773 Medium 6.3 Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal 0.4%
• CVE-2026-118764 Medium 6.9 minimatch: potential denial of service via globparts amplification 0.3%
• CVE-2026-73566 High 7.5 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 0.5%
• CVE-2026-59871 Medium 5.3 node-tar: Process crash via PAX numeric path type confusion 0.6%
• CVE-2026-59874 High 8.7 node-tar: Negative tar entry size causes infinite loop in archive replace 0.4%
• CVE-2026-59873 Critical 9.2 node-tar: Decompression/parse DoS via unlimited input 0.6%
• CVE-2026-59875 Medium 5.3 node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records 0.4%
• CVE-2026-53655 Medium 6.9 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) 0.2%
• CVE-2026-31802 High 8.2 node-tar Symlink Path Traversal via Drive-Relative Linkpath 0.3%
• CVE-2026-29786 High 8.6 node-tar: Hardlink Path Traversal via Drive-Relative Linkpath 0.5%
• CVE-2026-27904 High 7.5 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 0.5%
• CVE-2026-27903 High 7.5 minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments 0.6%
• CVE-2026-26996 High 8.7 minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 0.6%
• CVE-2026-26960 High 7.1 node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction 0.3%
• CVE-2026-25547 Critical 9.2 Uncontrolled Resource Consumption in @isaacs/brace-expansion 0.5%
• CVE-2026-24842 High 8.2 node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal 0.6%
• CVE-2026-23950 High 8.8 node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS 0.3%
• CVE-2026-23745 High 8.2 node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization 0.4%
• CVE-2025-64756 High 7.5 glob CLI: Command injection via -c/--cmd executes matches with shell:true 3.1%
• CVE-2025-64118 Medium 6.1 node-tar vulnerable to race condition leading to uninitialized memory exposure 0.1%
• CVE-2024-28863 Medium 6.5 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 0.9%