isaacs kayıtları
isaacs üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-400 Uncontrolled Resource Consumption1
- CWE-436 Interpretation Conflict1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-704 Incorrect Type Conversion or Cast1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-59873İstismar yok | node-tar: Decompression/parse DoS via unlimited inputisaacs · tar · CWE-770 | Kritik9,2 | — | %0,6 | 8 Tem 2026 |
34İzleyin | CVE-2026-59874İstismar yok | node-tar: Negative tar entry size causes infinite loop in archive replaceisaacs · tar · CWE-835 | Yüksek8,7 | — | %0,4 | 8 Tem 2026 |
32İzleyin | CVE-2026-24842İstismar yok | node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversalisaacs · tar · CWE-22 | Yüksek8,2 | — | %0,6 | 27 Oca 2026 |
32İzleyin | CVE-2026-29786Kavram kanıtı | node-tar: Hardlink Path Traversal via Drive-Relative Linkpathisaacs · tar · CWE-22 | Yüksek8,2 | — | %0,4 | 7 Mar 2026 |
32İzleyin | CVE-2026-23745Kavram kanıtı | node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitizationisaacs · tar · CWE-22 | Yüksek8,2 | — | %0,4 | 16 Oca 2026 |
32İzleyin | CVE-2026-31802Kavram kanıtı | node-tar Symlink Path Traversal via Drive-Relative Linkpathisaacs · tar · CWE-22 | Yüksek8,2 | — | %0,2 | 10 Mar 2026 |
31İzleyin | CVE-2018-20834İstismar yok | A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2).isaacs · tar · CWE-59 | Yüksek7,5 | — | %3,1 | 30 Nis 2019 |
31İzleyin | CVE-2025-64756İstismar yok | glob CLI: Command injection via -c/--cmd executes matches with shell:trueisaacs · glob · CWE-78 | Yüksek7,5 | — | %3,1 | 17 Kas 2025 |
30İzleyin | CVE-2026-59871İstismar yok | node-tar: Process crash via PAX numeric path type confusionisaacs · tar · CWE-704 | Yüksek7,5 | — | %0,6 | 8 Tem 2026 |
28İzleyin | CVE-2026-26960İstismar yok | node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extractionisaacs · tar · CWE-22 | Yüksek7,1 | — | %0,2 | 19 Şub 2026 |
27İzleyin | CVE-2026-53655İstismar yok | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)isaacs · tar · CWE-436 | Orta6,9 | — | %0,2 | 22 Haz 2026 |
26İzleyin | CVE-2024-28863İstismar yok | node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validationisaacs · tar · CWE-400 | Orta6,5 | — | %0,9 | 21 Mar 2024 |
23İzleyin | CVE-2026-23950İstismar yok | node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFSisaacs · tar · CWE-176 | Orta5,9 | — | %0,3 | 19 Oca 2026 |
- CVE-2026-5987336İzleyin
node-tar: Decompression/parse DoS via unlimited input
KritikCVSS 9,2İstismar yokEPSS %1isaacs · tar8 Tem 2026
- CVE-2026-5987434İzleyin
node-tar: Negative tar entry size causes infinite loop in archive replace
YüksekCVSS 8,7İstismar yokEPSS %0isaacs · tar8 Tem 2026
- CVE-2026-2484232İzleyin
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
YüksekCVSS 8,2İstismar yokEPSS %1isaacs · tar27 Oca 2026
- CVE-2026-2978632İzleyin
node-tar: Hardlink Path Traversal via Drive-Relative Linkpath
YüksekCVSS 8,2Kavram kanıtıEPSS %0isaacs · tar7 Mar 2026
- CVE-2026-2374532İzleyin
node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
YüksekCVSS 8,2Kavram kanıtıEPSS %0isaacs · tar16 Oca 2026
- CVE-2026-3180232İzleyin
node-tar Symlink Path Traversal via Drive-Relative Linkpath
YüksekCVSS 8,2Kavram kanıtıEPSS %0isaacs · tar10 Mar 2026
- CVE-2018-2083431İzleyin
A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2).
YüksekCVSS 7,5İstismar yokEPSS %3isaacs · tar30 Nis 2019
- CVE-2025-6475631İzleyin
glob CLI: Command injection via -c/--cmd executes matches with shell:true
YüksekCVSS 7,5İstismar yokEPSS %3isaacs · glob17 Kas 2025
- CVE-2026-5987130İzleyin
node-tar: Process crash via PAX numeric path type confusion
YüksekCVSS 7,5İstismar yokEPSS %1isaacs · tar8 Tem 2026
- CVE-2026-2696028İzleyin
node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction
YüksekCVSS 7,1İstismar yokEPSS %0isaacs · tar19 Şub 2026
- CVE-2026-5365527İzleyin
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
OrtaCVSS 6,9İstismar yokEPSS %0isaacs · tar22 Haz 2026
- CVE-2024-2886326İzleyin
node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation
OrtaCVSS 6,5İstismar yokEPSS %1isaacs · tar21 Mar 2024
- CVE-2026-2395023İzleyin
node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS
OrtaCVSS 5,9İstismar yokEPSS %0isaacs · tar19 Oca 2026